From 26a7e63766bcfee6b07cbc7d2926b613223cc76f Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Mon, 27 Jan 2025 21:04:13 +0000
Subject: [PATCH] fix: bom/pom.xml to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETOMCATEMBED-8523186
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHETOMCATEMBED-8547999
---
 bom/pom.xml | 44 +++++++++++++++++---------------------------
 1 file changed, 17 insertions(+), 27 deletions(-)

diff --git a/bom/pom.xml b/bom/pom.xml
index 316f836dec9..2bc0c54d2fc 100644
--- a/bom/pom.xml
+++ b/bom/pom.xml
@@ -173,7 +173,7 @@ It is therefore a copy of org.apache:apache, with customisations clearly identif
         <shiro.version>1.11.0</shiro.version>
         <simpleslackapi.version>1.4.0</simpleslackapi.version>
         <slf4j-api.version>2.0.6</slf4j-api.version> <!-- also provided by spring-boot-starter-logging, needed to solve convergence issues -->
-        <spring-boot.version>2.7.9</spring-boot.version>
+        <spring-boot.version>3.3.7</spring-boot.version>
         <summernote.version>0.8.20</summernote.version>
         <surefire-plugin.argLine>-Xmx384m</surefire-plugin.argLine>
         <swagger-core.version>2.2.8</swagger-core.version>
@@ -2564,81 +2564,71 @@ It is therefore a copy of org.apache:apache, with customisations clearly identif
                             <exclude>**/META-INF/services/**</exclude>
                         </excludes>
                         <licenses>
-                            <license
-                                    implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
+                            <license implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
                                 <licenseFamilyCategory>AL2  </licenseFamilyCategory>
                                 <licenseFamilyName>Apache License 2.0</licenseFamilyName>
-                                <notes />
+                                <notes/>
                                 <patterns>
                                     <pattern>Licensed to the Apache Software Foundation (ASF) under
                                         one</pattern>
                                 </patterns>
                             </license>
-                            <license
-                                    implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
+                            <license implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
                                 <licenseFamilyCategory>BSD3</licenseFamilyCategory>
                                 <licenseFamilyName>BSD 3-Clause</licenseFamilyName>
                                 <patterns>
                                     <pattern>BSD-3-Clause license</pattern>
                                 </patterns>
                             </license>
-                            <license
-                                    implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
+                            <license implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
                                 <licenseFamilyCategory>MIT</licenseFamilyCategory>
                                 <licenseFamilyName>MIT Licensed</licenseFamilyName>
-                                <notes />
+                                <notes/>
                                 <patterns>
                                     <pattern>The MIT License (MIT)</pattern>
                                     <pattern>Dual licensed under the MIT</pattern>
                                     <pattern>http://prismjs.com/download.html</pattern>
                                 </patterns>
                             </license>
-                            <license
-                                    implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
+                            <license implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
                                 <licenseFamilyCategory>CC3</licenseFamilyCategory>
                                 <licenseFamilyName>Creative Commons 3.0</licenseFamilyName>
-                                <notes />
+                                <notes/>
                                 <patterns>
                                     <pattern>ASCII text placed in the public domain by Moby Lexical Tools, 1992.</pattern>
                                 </patterns>
                             </license>
-                            <license
-                                    implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
+                            <license implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
                                 <licenseFamilyCategory>JMOCK</licenseFamilyCategory>
                                 <licenseFamilyName>JMock</licenseFamilyName>
-                                <notes />
+                                <notes/>
                                 <patterns>
                                     <pattern>Copyright (c) 2000-2007, jMock.org</pattern>
                                 </patterns>
                             </license>
-                            <license
-                                    implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
+                            <license implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
                                 <licenseFamilyCategory>JMOCK</licenseFamilyCategory>
                                 <licenseFamilyName>JMock</licenseFamilyName>
-                                <notes />
+                                <notes/>
                                 <patterns>
                                     <pattern>Copyright (c) 2000-2007, jMock.org</pattern>
                                 </patterns>
                             </license>
                         </licenses>
                         <licenseFamilies>
-                            <licenseFamily
-                                    implementation="org.apache.rat.license.SimpleLicenseFamily">
+                            <licenseFamily implementation="org.apache.rat.license.SimpleLicenseFamily">
                                 <familyName>Apache License 2.0</familyName>
                             </licenseFamily>
                             <licenseFamily implementation="org.apache.rat.license.SimpleLicenseFamily">
                                 <familyName>BSD 3-Clause</familyName>
                             </licenseFamily>
-                            <licenseFamily
-                                    implementation="org.apache.rat.license.SimpleLicenseFamily">
+                            <licenseFamily implementation="org.apache.rat.license.SimpleLicenseFamily">
                                 <familyName>MIT</familyName>
                             </licenseFamily>
-                            <licenseFamily
-                                    implementation="org.apache.rat.license.SimpleLicenseFamily">
+                            <licenseFamily implementation="org.apache.rat.license.SimpleLicenseFamily">
                                 <familyName>JMock</familyName>
                             </licenseFamily>
-                            <licenseFamily
-                                    implementation="org.apache.rat.license.SimpleLicenseFamily">
+                            <licenseFamily implementation="org.apache.rat.license.SimpleLicenseFamily">
                                 <familyName>XHTML</familyName>
                             </licenseFamily>
                         </licenseFamilies>
@@ -2790,7 +2780,7 @@ It is therefore a copy of org.apache:apache, with customisations clearly identif
                         <!-- seemingly not compatible with use of 2.0.0-SNAPSHOT placeholders
                             <requirePluginVersions> <message>All plugin versions must be defined!</message>
                             <banLatest>true</banLatest> <banRelease>true</banRelease> </requirePluginVersions> -->
-                        <DependencyConvergence />
+                        <DependencyConvergence/>
                     </rules>
                 </configuration>
                 <executions>