NIFI-14187 - Dep Upgrades - Spring, Netty, Flyway, AWS, GCP, etc

[pvillard31]

Summary

NIFI-14187 - Dep Upgrades - Spring, Netty, Bouncycastle, Flyway, AWS, GCP, etc

• AWS SDK v2 from 2.29.48 to 2.30.3 - https://github.com/aws/aws-sdk-java-v2/blob/master/CHANGELOG.md
• Spring Framework from 6.2.1 to 6.2.2 - https://github.com/spring-projects/spring-framework/releases
• Spring Data Redis from 3.4.1 to 3.4.2 - https://github.com/spring-projects/spring-data-redis/releases
• PostgreSQL from 42.7.4 to 42.7.5 - https://jdbc.postgresql.org/changelogs/2025-01-14-42.7.5-release/
• MIME4J from 0.8.11 to 0.8.12 - apache/james-mime4j@apache-mime4j-project-0.8.11...apache-mime4j-project-0.8.12
• Reactor Netty HTTP from 1.2.1 to 1.2.2 - https://github.com/reactor/reactor-netty/releases
• Reactor Core from 3.7.1 to 3.7.2 - https://github.com/reactor/reactor-core/releases
• Dropwizard Metrics from 4.2.29 to 4.2.30 - https://github.com/dropwizard/metrics/releases/tag/v4.2.30
• Box SDK from 4.13.1 to 4.14.0 - https://developer.box.com/changelog/#2025-01-22-box-java-sdk-v4140-released
• Commons CSV from 1.12.0 to 1.13.0 - https://commons.apache.org/proper/commons-csv/changes.html#a1.13.0
• GCP from 26.52.0 to 26.53.0 - https://github.com/googleapis/java-cloud-bom/releases/tag/v26.53.0
• ActiveMQ from 6.1.4 to 6.1.5 - https://issues.apache.org/jira/secure/ReleaseNote.jspa?projectId=12311210&version=12355276
• JSON Schema Validator from 1.5.4 to 1.5.5 - https://github.com/networknt/json-schema-validator/blob/master/CHANGELOG.md
• Camel Salesforce from 4.8.2 to 4.9.0 - apache/camel@camel-4.8.2...camel-4.9.0
• Slack Bolt from 1.45.0 to 1.45.1 - https://github.com/slackapi/java-slack-sdk/releases/tag/v1.45.1
• PY4J from 0.10.9.8 to 0.10.9.9 - https://www.py4j.org/changelog.html#py4j-0-10-9-9
• MySQL from 9.1.0 to 9.2.0 - https://dev.mysql.com/doc/relnotes/connector-j/en/news-9-2-0.html
• Flyway from 11.1.1 to 11.2.0 - https://documentation.red-gate.com/flyway/release-notes-and-older-versions/release-notes-for-flyway-engine
• OpenCSV from 5.9 to 5.10 - https://sourceforge.net/p/opencsv/wiki/What%27s%20new/
• Bouncycastle from 1.79 to 1.80 - https://www.bouncycastle.org/download/bouncy-castle-java/?filter=java%3Drelease-1-80
• Netty from 4.1.116.Final to 4.1.117.Final - https://netty.io/news/2025/01/14/4-1-117-Final.html
• Swagger annotations from 2.2.27 to 2.2.28 - https://github.com/swagger-api/swagger-core/releases/tag/v2.2.28

Tracking

Please complete the following tracking steps prior to pull request creation.

Issue Tracking

• Apache NiFi Jira issue created

Pull Request Tracking

• Pull Request title starts with Apache NiFi Jira issue number, such as NIFI-00000
• Pull Request commit message starts with Apache NiFi Jira issue number, as such NIFI-00000

Pull Request Formatting

• Pull Request based on current revision of the main branch
• Pull Request refers to a feature branch with one commit containing changes

Verification

Please indicate the verification steps performed prior to pull request creation.

Build

• Build completed using mvn clean install -P contrib-check
  • JDK 21

Licensing

• New dependencies are compatible with the Apache License 2.0 according to the License Policy
• New dependencies are documented in applicable LICENSE and NOTICE files

Documentation

• Documentation formatting appears as expected in rendered files

[exceptionfactory]

Thanks for putting together these updates @pvillard31.

It looks like something changed in the Bouncy Castle library related to algorithm registration, causing failures in DecryptContentPGP test methods. I will take a closer look at the changes in that library.

It looks like it would be best to pull that particular dependency upgrade out of this group to address separately.

[joewitt]

Filed https://issues.apache.org/jira/browse/NIFI-14189 and captured failure context info on that JIRA for resolution regarding Bouncycastle

[pvillard31]

Reverted the bouncycastle change for now.

[pvillard31]

Also reverted the bump for Spring Redis - it's causing an SSL init error in one of the unit tests but can't figure out the reason based on the changes on the Redis side. Just reverting for now to make progress.

[exceptionfactory]

Thanks for making the adjustments @pvillard31, the reduced set of upgrades looks good. +1 merging