noticket: Update YOJ dependencies

- Protobuf: 3.24.0 -> 3.25.5 (fixes GHSA-735f-pc8j-v9w8)
- Netty: 4.1.100.Final -> 4.1.118.Final (fixes GHSA-4g8c-wm8x-jfhw)
- Jackson: 2.17.1 -> 2.17.3
- Log4j2: 2.17.2 -> 2.23.1
- GSON: 2.10.1 -> 2.12.1
- errorprone annotations: 2.14.0 -> 2.36.0

- Kotlin (optional dependency): 1.9.22 -> 1.9.24

- Mockito (test dependency): 5.5.0 -> 5.11.0
- SnakeYAML (test dependency, for Log4j2 YAML config in tests): 1.33 -> 2.3
- Testcontainers (test dependency, for testing `yoj-repository-ydb-v2`): 1.19.1 -> 1.19.5
- Docker Java (test dependency, for testing `yoj-repository-ydb-v2`): 3.3.3 -> 3.4.2
- Kotlin Compile Testing (test dependency, for testing `yoj-ext-meta-generator`): 1.5.0 -> 1.6.0

Author: nvamelichev

WORKSPACE.bazel

@@ -5,7 +5,7 @@ ANNOTATION_API_VERSION = "1.3.2"
 
 ASPECTJ_VERSION = "1.9.21"
 
-ASSERTJ_VERSION = "3.25.1"
+ASSERTJ_VERSION = "3.25.3"
 
 COMMONS_TEXT_VERSION = "1.10.0"
 
@@ -17,31 +17,31 @@ GRPC_VERSION = "1.61.0"
 
 GUAVA_VERSION = "33.0.0-jre"
 
-JACKSON_VERSION = "2.16.1"
+JACKSON_VERSION = "2.17.3"
 
-JUNIT_JUPITER_VERSION = "5.10.1"
+JUNIT_JUPITER_VERSION = "5.10.5"
 
 JUNIT_VERSION = "4.13.2"
 
-KOTLIN_VERSION = "1.9.22"
+KOTLIN_VERSION = "1.9.24"
 
-LOG4J_VERSION = "2.22.1"
+LOG4J_VERSION = "2.23.1"
 
 LOMBOK_VERSION = "1.18.30"
 
-MOCKITO_VERSION = "5.9.0"
+MOCKITO_VERSION = "5.11.0"
 
 PROMETHEUS_VERSION = "1.1.0"
 
 SIMPLECLIENT_VERSION = "0.9.0"
 
-SLF4J_VERSION = "2.0.11"
+SLF4J_VERSION = "2.0.13"
 
-SNAKEYAML_VERSION = "1.33"
+SNAKEYAML_VERSION = "2.3"
 
-YDB_PROTOAPI_VERSION = "1.6.4"
+YDB_PROTOAPI_VERSION = "1.7.1"
 
-YDB_SDK_VERSION = "2.3.9"
+YDB_SDK_VERSION = "2.3.14"
 
 maven_install(
     name = "java_contribs_stable",

ext-meta-generator/pom.xml

@@ -34,6 +34,14 @@
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
         </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.core</groupId>
+            <artifactId>jackson-databind</artifactId>
+        </dependency>
+        <dependency>
+            <groupId>com.fasterxml.jackson.dataformat</groupId>
+            <artifactId>jackson-dataformat-yaml</artifactId>
+        </dependency>
 
         <dependency>
             <groupId>javax.annotation</groupId>
@@ -63,6 +71,5 @@
             <version>${auto-service.version}</version>
             <scope>provided</scope>
         </dependency>
-
     </dependencies>
-</project>
+</project>

ext-meta-generator/src/test/java/tech/ydb/yoj/generator/FieldGeneratorAnnotationProcessorTest.java

@@ -76,7 +76,10 @@ public void nonEntity() {
     @Test
     public void kotlinSourceClass() {
         // Prepare
-        SourceFile sourceFile = SourceFile.Companion.fromPath(new File("src/test/resources/input/KotlinDataClass.kt"));
+        SourceFile sourceFile = SourceFile.Companion.fromPath(
+                new File("src/test/resources/input/KotlinDataClass.kt"),
+                false
+        );
         KotlinCompilation compilation = new KotlinCompilation();
         compilation.setAnnotationProcessors(List.of(
                 new FieldGeneratorAnnotationProcessor()

pom.xml

@@ -119,10 +119,10 @@
         <lombok-maven-plugin.delombok.output>${project.build.directory}/delombok-for-javadoc</lombok-maven-plugin.delombok.output>
 
         <!-- compile dependencies -->
-        <protobuf.version>3.24.0</protobuf.version>
+        <protobuf.version>3.25.5</protobuf.version>
         <grpc.version>1.59.1</grpc.version>
         <proto-google-common-protos.version>2.9.0</proto-google-common-protos.version>
-        <netty.version>4.1.100.Final</netty.version>
+        <netty.version>4.1.118.Final</netty.version>
         <javax.annotation-api.version>1.3.2</javax.annotation-api.version>
         <jsr305.version>3.0.2</jsr305.version>
         <guava.version>33.0.0-jre</guava.version>
@@ -131,27 +131,29 @@
         <commons-lang.version>3.13.0</commons-lang.version>
         <commons-text.version>1.10.0</commons-text.version>
         <compile-testing.version>0.21.0</compile-testing.version>
-        <kotlin-compile-testing.version>1.5.0</kotlin-compile-testing.version>
+        <kotlin-compile-testing.version>1.6.0</kotlin-compile-testing.version>
         <prometheus.version>0.6.0</prometheus.version>
-        <error-prone-annotations.version>2.14.0</error-prone-annotations.version>
-        <gson-version>2.10.1</gson-version>
+        <error-prone-annotations.version>2.36.0</error-prone-annotations.version>
+        <gson-version>2.12.1</gson-version>
         <auto-service.version>1.1.1</auto-service.version>
 
         <!-- optional dependencies (Kotlin support) -->
-        <kotlin.version>1.9.22</kotlin.version>
+        <kotlin.version>1.9.24</kotlin.version>
 
         <!-- test dependencies -->
         <junit.version>4.13.2</junit.version>
         <hamcrest-core.version>2.2</hamcrest-core.version>
         <assertj-core.version>3.25.3</assertj-core.version>
-        <log4j2.version>2.17.2</log4j2.version>
-        <mockito.version>5.5.0</mockito.version>
+        <log4j2.version>2.23.1</log4j2.version>
+        <mockito.version>5.11.0</mockito.version>
         <!-- NB: testcontainers and docker-java versions are related - when bumping one, check if another needs to be bumped too -->
-        <docker-java.version>3.3.3</docker-java.version>
-        <testcontainers.version>1.19.1</testcontainers.version>
-        <jackson.version>2.17.1</jackson.version>
+        <docker-java.version>3.4.2</docker-java.version>
+        <testcontainers.version>1.21.1</testcontainers.version>
+        <!-- testcontainers ships with a vulnerable commons-compress=1.24.0 -->
+        <commons-compress.version>1.27.1</commons-compress.version>
+        <jackson.version>2.17.3</jackson.version>
         <bytebuddy.version>1.14.11</bytebuddy.version>
-        <snakeyaml.version>1.33</snakeyaml.version>
+        <snakeyaml.version>2.3</snakeyaml.version>
         <aspectjweaver.version>1.9.21</aspectjweaver.version>
         <system-stubs.version>2.1.7</system-stubs.version>
     </properties>
@@ -644,6 +646,11 @@
                 <artifactId>commons-text</artifactId>
                 <version>${commons-text.version}</version>
             </dependency>
+            <dependency>
+                <groupId>org.apache.commons</groupId>
+                <artifactId>commons-compress</artifactId>
+                <version>${commons-compress.version}</version>
+            </dependency>
             <dependency>
                 <groupId>tech.ydb</groupId>
                 <artifactId>ydb-sdk-bom</artifactId>