From f89041366bcbd175c8a4ff5c5be2fc263780a678 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Thu, 30 Jan 2025 22:05:33 +0000
Subject: [PATCH] fix: bom/pom.xml to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-ORGAPACHEWICKET-8660754
---
 bom/pom.xml | 44 +++++++++++++++++---------------------------
 1 file changed, 17 insertions(+), 27 deletions(-)

diff --git a/bom/pom.xml b/bom/pom.xml
index 316f836dec9..93686220f85 100644
--- a/bom/pom.xml
+++ b/bom/pom.xml
@@ -183,7 +183,7 @@ It is therefore a copy of org.apache:apache, with customisations clearly identif
         <vaadin.version>23.3.6</vaadin.version>
 
         <wicket.version>9.12.0</wicket.version> <!--  9.4.0 is last known good, before wicket put jupiter-api on the module graph -->
-        <wicket-bootstrap.version>6.0.0</wicket-bootstrap.version> <!-- de.agilecoders.wicket:wicket-bootstrap... -->
+        <wicket-bootstrap.version>7.0.9</wicket-bootstrap.version> <!-- de.agilecoders.wicket:wicket-bootstrap... -->
         <wicket-webjars.version>3.0.6</wicket-webjars.version>
         <wicket-viewer-jquery.version>3.6.3</wicket-viewer-jquery.version> <!--  as served by wicket via webjars -->
 
@@ -2564,81 +2564,71 @@ It is therefore a copy of org.apache:apache, with customisations clearly identif
                             <exclude>**/META-INF/services/**</exclude>
                         </excludes>
                         <licenses>
-                            <license
-                                    implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
+                            <license implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
                                 <licenseFamilyCategory>AL2  </licenseFamilyCategory>
                                 <licenseFamilyName>Apache License 2.0</licenseFamilyName>
-                                <notes />
+                                <notes/>
                                 <patterns>
                                     <pattern>Licensed to the Apache Software Foundation (ASF) under
                                         one</pattern>
                                 </patterns>
                             </license>
-                            <license
-                                    implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
+                            <license implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
                                 <licenseFamilyCategory>BSD3</licenseFamilyCategory>
                                 <licenseFamilyName>BSD 3-Clause</licenseFamilyName>
                                 <patterns>
                                     <pattern>BSD-3-Clause license</pattern>
                                 </patterns>
                             </license>
-                            <license
-                                    implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
+                            <license implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
                                 <licenseFamilyCategory>MIT</licenseFamilyCategory>
                                 <licenseFamilyName>MIT Licensed</licenseFamilyName>
-                                <notes />
+                                <notes/>
                                 <patterns>
                                     <pattern>The MIT License (MIT)</pattern>
                                     <pattern>Dual licensed under the MIT</pattern>
                                     <pattern>http://prismjs.com/download.html</pattern>
                                 </patterns>
                             </license>
-                            <license
-                                    implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
+                            <license implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
                                 <licenseFamilyCategory>CC3</licenseFamilyCategory>
                                 <licenseFamilyName>Creative Commons 3.0</licenseFamilyName>
-                                <notes />
+                                <notes/>
                                 <patterns>
                                     <pattern>ASCII text placed in the public domain by Moby Lexical Tools, 1992.</pattern>
                                 </patterns>
                             </license>
-                            <license
-                                    implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
+                            <license implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
                                 <licenseFamilyCategory>JMOCK</licenseFamilyCategory>
                                 <licenseFamilyName>JMock</licenseFamilyName>
-                                <notes />
+                                <notes/>
                                 <patterns>
                                     <pattern>Copyright (c) 2000-2007, jMock.org</pattern>
                                 </patterns>
                             </license>
-                            <license
-                                    implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
+                            <license implementation="org.apache.rat.analysis.license.SimplePatternBasedLicense">
                                 <licenseFamilyCategory>JMOCK</licenseFamilyCategory>
                                 <licenseFamilyName>JMock</licenseFamilyName>
-                                <notes />
+                                <notes/>
                                 <patterns>
                                     <pattern>Copyright (c) 2000-2007, jMock.org</pattern>
                                 </patterns>
                             </license>
                         </licenses>
                         <licenseFamilies>
-                            <licenseFamily
-                                    implementation="org.apache.rat.license.SimpleLicenseFamily">
+                            <licenseFamily implementation="org.apache.rat.license.SimpleLicenseFamily">
                                 <familyName>Apache License 2.0</familyName>
                             </licenseFamily>
                             <licenseFamily implementation="org.apache.rat.license.SimpleLicenseFamily">
                                 <familyName>BSD 3-Clause</familyName>
                             </licenseFamily>
-                            <licenseFamily
-                                    implementation="org.apache.rat.license.SimpleLicenseFamily">
+                            <licenseFamily implementation="org.apache.rat.license.SimpleLicenseFamily">
                                 <familyName>MIT</familyName>
                             </licenseFamily>
-                            <licenseFamily
-                                    implementation="org.apache.rat.license.SimpleLicenseFamily">
+                            <licenseFamily implementation="org.apache.rat.license.SimpleLicenseFamily">
                                 <familyName>JMock</familyName>
                             </licenseFamily>
-                            <licenseFamily
-                                    implementation="org.apache.rat.license.SimpleLicenseFamily">
+                            <licenseFamily implementation="org.apache.rat.license.SimpleLicenseFamily">
                                 <familyName>XHTML</familyName>
                             </licenseFamily>
                         </licenseFamilies>
@@ -2790,7 +2780,7 @@ It is therefore a copy of org.apache:apache, with customisations clearly identif
                         <!-- seemingly not compatible with use of 2.0.0-SNAPSHOT placeholders
                             <requirePluginVersions> <message>All plugin versions must be defined!</message>
                             <banLatest>true</banLatest> <banRelease>true</banRelease> </requirePluginVersions> -->
-                        <DependencyConvergence />
+                        <DependencyConvergence/>
                     </rules>
                 </configuration>
                 <executions>