Summarized Dependency Updates (Prometheus, Lang3, Caffeine)

DEPENDENCY-LICENSES

@@ -36,7 +36,7 @@ List of third-party dependencies grouped by their license type.
         * Apache Commons Exec (org.apache.commons:commons-exec:1.5.0 - https://commons.apache.org/proper/commons-exec/)
         * Apache Commons FileUpload (commons-fileupload:commons-fileupload:1.6.0 - https://commons.apache.org/proper/commons-fileupload/)
         * Apache Commons IO (commons-io:commons-io:2.19.0 - https://commons.apache.org/proper/commons-io/)
-        * Apache Commons Lang (org.apache.commons:commons-lang3:3.17.0 - https://commons.apache.org/proper/commons-lang/)
+        * Apache Commons Lang (org.apache.commons:commons-lang3:3.18.0 - https://commons.apache.org/proper/commons-lang/)
         * Apache Commons Logging (commons-logging:commons-logging:1.2 - http://commons.apache.org/proper/commons-logging/)
         * Apache Commons Logging (commons-logging:commons-logging:1.3.5 - https://commons.apache.org/proper/commons-logging/)
         * Apache Commons Math (org.apache.commons:commons-math3:3.6.1 - http://commons.apache.org/proper/commons-math/)
@@ -70,8 +70,8 @@ List of third-party dependencies grouped by their license type.
         * Apache HttpComponents Core HTTP/2 (org.apache.httpcomponents.core5:httpcore5-h2:5.2 - https://hc.apache.org/httpcomponents-core-5.2.x/5.2/httpcore5-h2/)
         * Apache HttpCore (org.apache.httpcomponents:httpcore:4.4.16 - http://hc.apache.org/httpcomponents-core-ga)
         * Apache Kafka (org.apache.kafka:kafka-clients:3.9.0 - https://kafka.apache.org)
-        * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.25.0 - https://logging.apache.org/log4j/2.x/)
-        * Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.25.0 - https://logging.apache.org/log4j/2.x/)
+        * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.25.1 - https://logging.apache.org/log4j/2.x/)
+        * Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.25.1 - https://logging.apache.org/log4j/2.x/)
         * Apache Maven Shade Plugin (org.apache.maven.plugins:maven-shade-plugin:3.6.0 - https://maven.apache.org/plugins/maven-shade-plugin/)
         * Apache Maven Shared Utils (org.apache.maven.shared:maven-shared-utils:3.2.1 - https://maven.apache.org/shared/maven-shared-utils/)
         * Apache Thrift (org.apache.thrift:libthrift:0.22.0 - https://thrift.apache.org/)
@@ -84,7 +84,7 @@ List of third-party dependencies grouped by their license type.
         * Auto Common Libraries (com.google.auto:auto-common:1.2.1 - https://github.com/google/auto/tree/master/common)
         * AutoService (com.google.auto.service:auto-service-annotations:1.1.1 - https://github.com/google/auto/tree/main/service)
         * AutoService Processor (com.google.auto.service:auto-service:1.1.1 - https://github.com/google/auto/tree/main/service)
-        * Caffeine cache (com.github.ben-manes.caffeine:caffeine:3.2.1 - https://github.com/ben-manes/caffeine)
+        * Caffeine cache (com.github.ben-manes.caffeine:caffeine:3.2.2 - https://github.com/ben-manes/caffeine)
         * Calcite Core (org.apache.calcite:calcite-core:1.16.0 - https://calcite.apache.org/calcite-core)
         * Calcite Linq4j (org.apache.calcite:calcite-linq4j:1.16.0 - https://calcite.apache.org/calcite-linq4j)
         * CDI APIs (javax.enterprise:cdi-api:1.0 - http://www.seamframework.org/Weld/cdi-api)
@@ -112,7 +112,7 @@ List of third-party dependencies grouped by their license type.
         * Dropwizard Servlet Support (io.dropwizard:dropwizard-servlets:4.0.14 - http://www.dropwizard.io/4.0.14/dropwizard-bom/dropwizard-dependencies/dropwizard-parent/dropwizard-servlets)
         * Dropwizard Utility Classes (io.dropwizard:dropwizard-util:4.0.14 - http://www.dropwizard.io/4.0.14/dropwizard-bom/dropwizard-dependencies/dropwizard-parent/dropwizard-util)
         * Dropwizard Validation Support (io.dropwizard:dropwizard-validation:4.0.14 - http://www.dropwizard.io/4.0.14/dropwizard-bom/dropwizard-dependencies/dropwizard-parent/dropwizard-validation)
-        * error-prone annotations (com.google.errorprone:error_prone_annotations:2.39.0 - https://errorprone.info/error_prone_annotations)
+        * error-prone annotations (com.google.errorprone:error_prone_annotations:2.40.0 - https://errorprone.info/error_prone_annotations)
         * Esri Geometry API for Java (com.esri.geometry:esri-geometry-api:2.0.0 - https://github.com/Esri/geometry-api-java)
         * FindBugs-jsr305 (com.google.code.findbugs:jsr305:3.0.1 - http://findbugs.sourceforge.net/)
         * FindBugs-jsr305 (com.google.code.findbugs:jsr305:3.0.2 - http://findbugs.sourceforge.net/)
@@ -258,19 +258,19 @@ List of third-party dependencies grouped by their license type.
         * Plexus Interpolation API (org.codehaus.plexus:plexus-interpolation:1.25 - http://codehaus-plexus.github.io/plexus-interpolation/)
         * Plexus Interpolation API (org.codehaus.plexus:plexus-interpolation:1.28 - https://codehaus-plexus.github.io/plexus-pom/plexus-interpolation/)
         * Plexus Security Dispatcher Component (org.sonatype.plexus:plexus-sec-dispatcher:1.4 - http://spice.sonatype.org/plexus-sec-dispatcher)
-        * Prometheus Metrics Config (io.prometheus:prometheus-metrics-config:1.3.9 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-config)
-        * Prometheus Metrics Core (io.prometheus:prometheus-metrics-core:1.3.9 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-core)
-        * Prometheus Metrics Exporter - Common (io.prometheus:prometheus-metrics-exporter-common:1.3.9 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-exporter-common)
-        * Prometheus Metrics Exporter - Pushgateway (io.prometheus:prometheus-metrics-exporter-pushgateway:1.3.9 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-exporter-pushgateway)
-        * Prometheus Metrics Exposition Formats (io.prometheus:prometheus-metrics-exposition-formats:1.3.9 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-formats)
-        * Prometheus Metrics Exposition Text Formats (io.prometheus:prometheus-metrics-exposition-textformats:1.3.9 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-textformats)
-        * Prometheus Metrics Model (io.prometheus:prometheus-metrics-model:1.3.9 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-model)
-        * Prometheus Metrics Tracer Common (io.prometheus:prometheus-metrics-tracer-common:1.3.9 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-common)
-        * Prometheus Metrics Tracer Initializer (io.prometheus:prometheus-metrics-tracer-initializer:1.3.9 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-initializer)
-        * Prometheus Metrics Tracer OpenTelemetry (io.prometheus:prometheus-metrics-tracer-otel:1.3.9 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-otel)
-        * Prometheus Metrics Tracer OpenTelemetry Agent (io.prometheus:prometheus-metrics-tracer-otel-agent:1.3.9 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-otel-agent)
+        * Prometheus Metrics Config (io.prometheus:prometheus-metrics-config:1.3.10 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-config)
+        * Prometheus Metrics Core (io.prometheus:prometheus-metrics-core:1.3.10 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-core)
+        * Prometheus Metrics Exporter - Common (io.prometheus:prometheus-metrics-exporter-common:1.3.10 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-exporter-common)
+        * Prometheus Metrics Exporter - Pushgateway (io.prometheus:prometheus-metrics-exporter-pushgateway:1.3.10 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-exporter-pushgateway)
+        * Prometheus Metrics Exposition Formats (io.prometheus:prometheus-metrics-exposition-formats:1.3.10 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-formats)
+        * Prometheus Metrics Exposition Text Formats (io.prometheus:prometheus-metrics-exposition-textformats:1.3.10 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-exposition-textformats)
+        * Prometheus Metrics Model (io.prometheus:prometheus-metrics-model:1.3.10 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-model)
+        * Prometheus Metrics Tracer Common (io.prometheus:prometheus-metrics-tracer-common:1.3.10 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-common)
+        * Prometheus Metrics Tracer Initializer (io.prometheus:prometheus-metrics-tracer-initializer:1.3.10 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-initializer)
+        * Prometheus Metrics Tracer OpenTelemetry (io.prometheus:prometheus-metrics-tracer-otel:1.3.10 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-otel)
+        * Prometheus Metrics Tracer OpenTelemetry Agent (io.prometheus:prometheus-metrics-tracer-otel-agent:1.3.10 - http://github.com/prometheus/client_java/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-otel-agent)
         * sigar (org.fusesource:sigar:1.6.4 - http://fusesource.com/sigar/)
-        * SLF4J 2 Provider for Log4j API (org.apache.logging.log4j:log4j-slf4j2-impl:2.25.0 - https://logging.apache.org/log4j/2.x/)
+        * SLF4J 2 Provider for Log4j API (org.apache.logging.log4j:log4j-slf4j2-impl:2.25.1 - https://logging.apache.org/log4j/2.x/)
         * SnakeYAML (org.yaml:snakeyaml:2.2 - https://bitbucket.org/snakeyaml/snakeyaml)
         * snappy-java (org.xerial.snappy:snappy-java:1.1.10.7 - https://github.com/xerial/snappy-java)
         * Spring AOP (org.springframework:spring-aop:6.2.8 - https://github.com/spring-projects/spring-framework)

LICENSE-binary

@@ -654,7 +654,7 @@ The license texts of these dependencies can be found in the licenses directory.
 
         * Apache Avro (org.apache.avro:avro:1.12.0 - https://avro.apache.org)
         * Apache Commons FileUpload (commons-fileupload:commons-fileupload:1.6.0 - https://commons.apache.org/proper/commons-fileupload/)
-        * Apache Commons Lang (org.apache.commons:commons-lang3:3.17.0 - https://commons.apache.org/proper/commons-lang/)
+        * Apache Commons Lang (org.apache.commons:commons-lang3:3.18.0 - https://commons.apache.org/proper/commons-lang/)
         * Apache Commons Text (org.apache.commons:commons-text:1.13.1 - https://commons.apache.org/proper/commons-text)
         * snappy-java (org.xerial.snappy:snappy-java:1.1.10.7 - https://github.com/xerial/snappy-java)
 
@@ -707,16 +707,16 @@ The license texts of these dependencies can be found in the licenses directory.
         * Apache HttpClient (org.apache.httpcomponents:httpclient:4.5.14 - http://hc.apache.org/httpcomponents-client-ga)
         * Apache HttpCore (org.apache.httpcomponents:httpcore:4.4.16 - http://hc.apache.org/httpcomponents-core-ga)
         * Apache Kafka (org.apache.kafka:kafka-clients:3.9.0 - https://kafka.apache.org)
-        * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.25.0 - https://logging.apache.org/log4j/2.x/log4j-api/)
-        * Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.25.0 - https://logging.apache.org/log4j/2.x/log4j-core/)
-        * Apache Log4j SLF4J Binding (org.apache.logging.log4j:log4j-slf4j2-impl:2.25.0 - https://logging.apache.org/log4j/2.x/log4j-slf4j2-impl/)
+        * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.25.1 - https://logging.apache.org/log4j/2.x/log4j-api/)
+        * Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.25.1 - https://logging.apache.org/log4j/2.x/log4j-core/)
+        * Apache Log4j SLF4J Binding (org.apache.logging.log4j:log4j-slf4j2-impl:2.25.1 - https://logging.apache.org/log4j/2.x/log4j-slf4j2-impl/)
         * Apache Thrift (org.apache.thrift:libthrift:0.22.0 - libthrift:0.22.0rift.apache.org)
         * Apache Yetus - Audience Annotations (org.apache.yetus:audience-annotations:0.12.0 - https://yetus.apache.org/audience-annotations)
         * Apache Yetus - Audience Annotations (org.apache.yetus:audience-annotations:0.13.0 - https://yetus.apache.org/audience-annotations)
         * Apache ZooKeeper - Jute (org.apache.zookeeper:zookeeper-jute:3.9.3 - http://zookeeper.apache.org/zookeeper-jute)
         * Apache ZooKeeper - Server (org.apache.zookeeper:zookeeper:3.9.3 - http://zookeeper.apache.org/zookeeper)
         * ASM based accessors helper used by json-smart (net.minidev:accessors-smart:2.5.2 - https://urielch.github.io/)
-        * Caffeine cache (com.github.ben-manes.caffeine:caffeine:3.2.1 - https://github.com/ben-manes/caffeine)
+        * Caffeine cache (com.github.ben-manes.caffeine:caffeine:3.2.2 - https://github.com/ben-manes/caffeine)
         * Calcite Core (org.apache.calcite:calcite-core:1.16.0 - https://calcite.apache.org/calcite-core)
         * Calcite Linq4j (org.apache.calcite:calcite-linq4j:1.16.0 - https://calcite.apache.org/calcite-linq4j)
         * chill-java (com.twitter:chill-java:0.9.5 - https://github.com/twitter/chill)
@@ -744,7 +744,7 @@ The license texts of these dependencies can be found in the licenses directory.
         * Dropwizard Servlet Support (io.dropwizard:dropwizard-servlets:4.0.14 - http://www.dropwizard.io/4.0.14/dropwizard-bom/dropwizard-dependencies/dropwizard-parent/dropwizard-servlets)
         * Dropwizard Utility Classes (io.dropwizard:dropwizard-util:4.0.14 - http://www.dropwizard.io/4.0.14/dropwizard-bom/dropwizard-dependencies/dropwizard-parent/dropwizard-util)
         * Dropwizard Validation Support (io.dropwizard:dropwizard-validation:4.0.14 - http://www.dropwizard.io/4.0.14/dropwizard-bom/dropwizard-dependencies/dropwizard-parent/dropwizard-validation)
-        * error-prone annotations (com.google.errorprone:error_prone_annotations:2.39.0 - https://errorprone.info/error_prone_annotations)
+        * error-prone annotations (com.google.errorprone:error_prone_annotations:2.40.0 - https://errorprone.info/error_prone_annotations)
         * Esri Geometry API for Java (com.esri.geometry:esri-geometry-api:2.0.0 - https://github.com/Esri/geometry-api-java)
         * FindBugs-jsr305 (com.google.code.findbugs:jsr305:3.0.1 - http://findbugs.sourceforge.net/)
         * FindBugs-jsr305 (com.google.code.findbugs:jsr305:3.0.2 - http://findbugs.sourceforge.net/)

external/storm-metrics-prometheus/pom.xml

@@ -30,7 +30,7 @@
     <name>storm-metrics-prometheus</name>
 
     <properties>
-        <prometheus.client.version>1.3.9</prometheus.client.version>
+        <prometheus.client.version>1.3.10</prometheus.client.version>
     </properties>
 
     <dependencies>

pom.xml

@@ -86,7 +86,7 @@
         <commons-compress.version>1.27.1</commons-compress.version>
         <commons-io.version>2.19.0</commons-io.version>
         <commons-lang.version>2.6</commons-lang.version>
-        <commons-lang3.version>3.17.0</commons-lang3.version>
+        <commons-lang3.version>3.18.0</commons-lang3.version>
         <commons-exec.version>1.5.0</commons-exec.version>
         <commons-collections.version>4.5.0</commons-collections.version>
         <commons-fileupload.version>1.6.0</commons-fileupload.version>
@@ -107,7 +107,7 @@
         <netty-tcnative.version>2.0.72.Final</netty-tcnative.version>
         <netty.version>4.2.2.Final</netty.version>
         <sysout-over-slf4j.version>1.0.2</sysout-over-slf4j.version>
-        <log4j.version>2.25.0</log4j.version>
+        <log4j.version>2.25.1</log4j.version>
         <slf4j.version>2.0.17</slf4j.version>
         <metrics.version>4.2.33</metrics.version>
         <mockito.version>5.14.2</mockito.version>
@@ -149,7 +149,7 @@
         <jersey.version>3.1.10</jersey.version>
         <dropwizard.version>4.0.14</dropwizard.version>
         <j2html.version>1.6.0</j2html.version>
-        <caffeine.version>3.2.1</caffeine.version>
+        <caffeine.version>3.2.2</caffeine.version>
         <jakarta-jaxb-version>2.3.2</jakarta-jaxb-version>
         <jakarta-activation-version>1.2.1</jakarta-activation-version>
         <jakarta-jaxws-version>3.1.0</jakarta-jaxws-version>
@@ -165,7 +165,7 @@
         <jakarta-el.version>3.0.1-b12</jakarta-el.version>
         <asm.version>9.8</asm.version>
         <checker-qual.version>3.49.5</checker-qual.version>
-        <error_prone_annotations.version>2.39.0</error_prone_annotations.version>
+        <error_prone_annotations.version>2.40.0</error_prone_annotations.version>
         <bouncycastle.version>1.81</bouncycastle.version>
     </properties>