Addressed vulnerabilities and component changes

Library	Old version	New version	CVEs addressed
Apache Commons IO	2.20.0	2.22.0
Caffeine	3.2.2	3.2.4
Apache Commons Codec	1.20.0	1.22.0
Apache POI	5.4.1	5.5.1
Thymeleaf	3.1.3.RELEASE	3.1.5.RELEASE	CVE-2026-40478 CVE-2026-41901
Bouncy Castle	1.83	1.84	CVE-2026-0636 CVE-2026-3505 CVE-2026-5598 CVE-2026-5588 CVE-2025-14813
springdoc-openapi-starter-webmvc-ui	2.8.3	2.8.17	CVE-2026-29145 CVE-2026-25854 CVE-2026-24880 CVE-2026-24734 CVE-2026-24733 CVE-2026-22733 CVE-2026-22731 CVE-2025-66614 CVE-2025-61795 CVE-2025-55754 CVE-2025-55752 CVE-2025-53506 CVE-2025-52520 CVE-2025-49125 CVE-2025-49124 CVE-2025-48989 CVE-2025-48988
hibernate-validator	8.0.2.Final	8.0.3.Final	CVE-2026-34480 CVE-2026-34477 CVE-2026-24400 CVE-2025-68161 CVE-2022-42004 CVE-2022-42003 CVE-2022-4065
nimbus-jose-jwt	10.0.1	10.0.2	CVE-2025-53864
spring	6.2.15	6.2.18
zookeeper	3.9.3	3.9.5	CVE-2026-24308 CVE-2026-24281 CVE-2025-58457
jackson	2.18.5	2.18.8
slf4j	2.0.16	2.0.18
angus mail	2.0.3	2.0.5	CVE-2025-7962
angus activation	2.0.2	2.0.3
artemis	2.40.0	2.54.0
apache curator	5.8.0	5.9.0	CVE-2025-52999

Library	Old version	New version	CVEs addressed
JGit	7.1.0.202411261347-r	7.3.0.202506031305-r	CVE-2025-4949

Library	Old version	New version	CVEs addressed
Apache Log4j	2.25.3	2.25.4	CVE-2026-34478 CVE-2026-34479 CVE-2026-34480 CVE-2026-34481 CVE-2026-34477
Bouncy Castle	1.81	1.84	CVE-2026-5598 CVE-2026-3505 CVE-2026-0636
Jackson Core	2.17.0	2.21.2
Jackson Databind	2.17.0	2.21.2
Jackson Annotations	2.17.0	2.21
JxBrowser	8.0.0	8.18.2	hundreds, consult links at https://teamdev.com/jxbrowser/releases/2024/v8-1-0/ and other versions up to 8.18.2
Groovy	4.0.29	5.0.6