🔐 Update dependencies to fix vulnerabilities

doc/changes/changes_0.1.14.md

@@ -0,0 +1,37 @@
+# Small Json Files Test Fixture 0.1.14, released 2025-??-??
+
+Code name: Fixed vulnerability CVE-2025-58057 in io.netty:netty-codec:jar:4.1.124.Final:runtime
+
+## Summary
+
+This release fixes the following vulnerability:
+
+### CVE-2025-58057 (CWE-409) in dependency `io.netty:netty-codec:jar:4.1.124.Final:runtime`
+netty-codec - Improper Handling of Highly Compressed Data (Data Amplification)
+#### References
+* https://ossindex.sonatype.org/vulnerability/CVE-2025-58057?component-type=maven&component-name=io.netty%2Fnetty-codec&utm_source=ossindex-client&utm_medium=integration&utm_content=1.8.1
+* http://web.nvd.nist.gov/view/vuln/detail?vulnId=CVE-2025-58057
+* https://github.com/netty/netty/security/advisories/GHSA-3p8m-j85q-pgmj
+
+## Security
+
+* #44: Fixed vulnerability CVE-2025-58057 in dependency `io.netty:netty-codec:jar:4.1.124.Final:runtime`
+
+## Dependency Updates
+
+### Small Json Files Test Fixture
+
+#### Compile Dependency Updates
+
+* Updated `org.mockito:mockito-core:5.15.2` to `5.19.0`
+* Updated `software.amazon.awssdk:apache-client:2.32.25` to `2.33.3`
+* Updated `software.amazon.awssdk:iam:2.32.25` to `2.33.3`
+* Updated `software.amazon.awssdk:lambda:2.32.25` to `2.33.3`
+* Updated `software.amazon.awssdk:s3:2.32.25` to `2.33.3`
+* Updated `software.amazon.awssdk:sts:2.32.25` to `2.33.3`
+
+#### Test Dependency Updates
+
+* Updated `nl.jqno.equalsverifier:equalsverifier:3.19` to `4.1`
+* Updated `org.junit.jupiter:junit-jupiter-params:5.11.4` to `5.13.4`
+* Updated `org.slf4j:slf4j-jdk14:2.0.16` to `2.0.17`

pom.xml

@@ -1,8 +1,8 @@
-<?xml version="1.0" encoding="UTF-8"?>
+<?xml version="1.0" encoding="UTF-8" standalone="no"?>
 <project xmlns="http://maven.apache.org/POM/4.0.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xsi:schemaLocation="http://maven.apache.org/POM/4.0.0 http://maven.apache.org/xsd/maven-4.0.0.xsd">
     <modelVersion>4.0.0</modelVersion>
     <artifactId>small-json-files-test-fixture</artifactId>
-    <version>0.1.13</version>
+    <version>0.1.14</version>
     <name>Small Json Files Test Fixture</name>
     <description>Test fixture with many small JSON files on S3.</description>
     <url>https://github.com/exasol/small-json-files-test-fixture/</url>
@@ -11,7 +11,7 @@
             <dependency>
                 <groupId>software.amazon.awssdk</groupId>
                 <artifactId>bom</artifactId>
-                <version>2.32.25</version>
+                <version>2.33.3</version>
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
@@ -69,25 +69,25 @@
         <dependency>
             <groupId>org.junit.jupiter</groupId>
             <artifactId>junit-jupiter-params</artifactId>
-            <version>5.11.4</version>
+            <version>5.13.4</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>org.mockito</groupId>
             <artifactId>mockito-core</artifactId>
-            <version>5.15.2</version>
+            <version>5.19.0</version>
         </dependency>
         <!--Integration test dependencies-->
         <dependency>
             <groupId>nl.jqno.equalsverifier</groupId>
             <artifactId>equalsverifier</artifactId>
-            <version>3.19</version>
+            <version>4.1</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>org.slf4j</groupId>
             <artifactId>slf4j-jdk14</artifactId>
-            <version>2.0.16</version>
+            <version>2.0.17</version>
             <scope>test</scope>
         </dependency>
     </dependencies>
@@ -165,7 +165,7 @@
     <parent>
         <artifactId>small-json-files-test-fixture-generated-parent</artifactId>
         <groupId>com.exasol</groupId>
-        <version>0.1.13</version>
+        <version>0.1.14</version>
         <relativePath>pk_generated_parent.pom</relativePath>
     </parent>
 </project>