TIKA-4456: update commons-codec, commons-csv, commons-exec, jackson, jetty, junit5, netty, reactor, snappy

Author: THausherr

tika-parent/pom.xml

@@ -322,11 +322,11 @@
     <!-- NOTE: sync brotli version with commons-compress-->
     <brotli.version>0.1.2</brotli.version>
     <commons.cli.version>1.9.0</commons.cli.version>
-    <commons.codec.version>1.18.0</commons.codec.version>
+    <commons.codec.version>1.19.0</commons.codec.version>
     <commons.collections4.version>4.5.0</commons.collections4.version>
     <commons.compress.version>1.28.0</commons.compress.version>
-    <commons.csv.version>1.14.0</commons.csv.version>
-    <commons.exec.version>1.4.0</commons.exec.version>
+    <commons.csv.version>1.14.1</commons.csv.version>
+    <commons.exec.version>1.5.0</commons.exec.version>
     <commons.io.version>2.19.0</commons.io.version>
     <commons.lang3.version>3.18.0</commons.lang3.version>
     <commons.logging.version>1.3.5</commons.logging.version>
@@ -350,7 +350,7 @@
     <imageio.version>1.4.0</imageio.version>
     <!-- jackrabbit 2.21.23 requires java 11 -->
     <jackrabbit.version>2.21.22</jackrabbit.version>
-    <jackson.version>2.19.1</jackson.version>
+    <jackson.version>2.19.2</jackson.version>
     <jackcess.version>4.0.8</jackcess.version>
     <jackcess.encrypt.version>4.0.3</jackcess.encrypt.version>
     <javax.annotation.version>1.3.2</javax.annotation.version>
@@ -364,12 +364,12 @@
     <jbig2.version>3.0.4</jbig2.version>
     <jdom2.version>2.0.6.1</jdom2.version>
     <jempbox.version>1.8.17</jempbox.version>
-    <jetty.version>9.4.57.v20241219</jetty.version>
+    <jetty.version>9.4.58.v20250814</jetty.version>
     <jhighlight.version>1.1.0</jhighlight.version>
     <jna.version>5.17.0</jna.version>
     <json.simple.version>1.1.1</json.simple.version>
     <junit4.version>4.13.2</junit4.version>
-    <junit5.version>5.13.3</junit5.version>
+    <junit5.version>5.13.4</junit5.version>
     <junrar.version>7.5.5</junrar.version>
     <libpst.version>0.9.3</libpst.version>
     <log4j2.version>2.25.1</log4j2.version>
@@ -382,7 +382,7 @@
     <!-- mockito >= 5 requires jdk11 -->
     <mockito.version>4.11.0</mockito.version>
     <netcdf-java.version>4.5.5</netcdf-java.version>
-    <netty.version>4.2.3.Final</netty.version>
+    <netty.version>4.2.4.Final</netty.version>
     <oak.jackrabbit.version>1.82.0</oak.jackrabbit.version>
     <openjson.version>1.0.13</openjson.version>
     <!-- 2.0.0 doesn't compile with jdk8 -->
@@ -398,8 +398,8 @@
     <poi.version>5.4.1</poi.version>
     <!-- 2.5.0 needs jakarta.xml.bind 4.0.2 in tika-parser-scientific-module -->
     <quartz.version>2.3.2</quartz.version>
-    <reactor.core.version>3.7.7</reactor.core.version>
-    <reactor.netty.version>1.3.0-M5</reactor.netty.version>
+    <reactor.core.version>3.7.9</reactor.core.version>
+    <reactor.netty.version>1.3.0-M6</reactor.netty.version>
     <rome.version>2.1.0</rome.version>
     <scm.version>2.1.0</scm.version>
     <sis.version>1.3</sis.version>
@@ -425,7 +425,7 @@
     <zstd.version>1.5.7-2</zstd.version>
     <!-- 4.0.0 doesn't compile with jdk8 -->
     <kafka.version>3.9.1</kafka.version>
-    <snappy.java.version>1.1.10.7</snappy.java.version>
+    <snappy.java.version>1.1.10.8</snappy.java.version>
     <!-- can't update to 1.4, these need jdk11 -->
     <logback.version>1.3.15</logback.version>
     <javacpp.version>1.5.11</javacpp.version>