Potentially vulnerable dependencies

[ChGen]

Currently we have various dependencies which may use outdated and vulnerable code with know CVEs. It's reported by IDE Idea for example, and periodically by GitHub too. Also it is concern for the users (see below). So we need to revise all our dependencies, including dependencies in our tests and our adapers. And make our GitHub CI check/report relevant security issues in explicit manner.

Evgeny, [24.11.2023 15:17]
Have you tried prebuilt docker images, for example, the latest artipie/artipie:v0.30.10  ?
Ram, [24.11.2023 15:18]
Let me try with it, mainly there are CVE vulnerabilies in the precompiled jar

[bade02r]

Here are few jars that needs to updated:

org.apache.commons:commons-text: Installed version / Fixed version0:1.6 / 1.10.0
com.google.code.gsongson: Installed version / Fixed version 0:2.8.6 / 2.8.9
org.redisson:redisson: Installed version / Fixed version 0:3.17.4 / 3.22.0

[github-actions]

Issue is stale, CC: @artipie/maintainers