[PF-2987]: Bump the minor-patch-dependencies group across 1 directory with 9 updates (#151)

* [PF-2987]: Bump the minor-patch-dependencies group across 1 directory with 9 updates

Bumps the minor-patch-dependencies group with 9 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| com.jfrog.artifactory | `5.2.0` | `5.2.2` |
| [com.google.cloud:libraries-bom](https://github.com/googleapis/java-cloud-bom) | `26.40.0` | `26.42.0` |
| [org.springframework:spring-context](https://github.com/spring-projects/spring-framework) | `6.1.8` | `6.1.10` |
| [org.springframework:spring-web](https://github.com/spring-projects/spring-framework) | `6.1.8` | `6.1.10` |
| [org.springframework.shell:spring-shell-starter](https://github.com/spring-projects/spring-shell) | `3.2.5` | `3.3.1` |
| [org.springframework.boot](https://github.com/spring-projects/spring-boot) | `3.2.5` | `3.3.1` |
| [com.azure:azure-messaging-servicebus](https://github.com/Azure/azure-sdk-for-java) | `7.17.0` | `7.17.1` |
| [com.azure:azure-identity](https://github.com/Azure/azure-sdk-for-java) | `1.12.1` | `1.13.0` |
| [io.netty:netty-bom](https://github.com/netty/netty) | `4.1.110.Final` | `4.1.111.Final` |



Updates `com.jfrog.artifactory` from 5.2.0 to 5.2.2

Updates `com.google.cloud:libraries-bom` from 26.40.0 to 26.42.0
- [Release notes](https://github.com/googleapis/java-cloud-bom/releases)
- [Changelog](https://github.com/googleapis/java-cloud-bom/blob/main/release-please-config.json)
- [Commits](googleapis/java-cloud-bom@v26.40.0...v26.42.0)

Updates `org.springframework:spring-context` from 6.1.8 to 6.1.10
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.1.8...v6.1.10)

Updates `org.springframework:spring-web` from 6.1.8 to 6.1.10
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](spring-projects/spring-framework@v6.1.8...v6.1.10)

Updates `org.springframework.shell:spring-shell-starter` from 3.2.5 to 3.3.1
- [Release notes](https://github.com/spring-projects/spring-shell/releases)
- [Commits](spring-projects/spring-shell@v3.2.5...v3.3.1)

Updates `org.springframework.boot` from 3.2.5 to 3.3.1
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.2.5...v3.3.1)

Updates `com.azure:azure-messaging-servicebus` from 7.17.0 to 7.17.1
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@azure-messaging-servicebus_7.17.0...azure-messaging-servicebus_7.17.1)

Updates `com.azure:azure-identity` from 1.12.1 to 1.13.0
- [Release notes](https://github.com/Azure/azure-sdk-for-java/releases)
- [Commits](Azure/azure-sdk-for-java@azure-identity_1.12.1...azure-core_1.13.0)

Updates `io.netty:netty-bom` from 4.1.110.Final to 4.1.111.Final
- [Commits](netty/netty@netty-4.1.110.Final...netty-4.1.111.Final)

---
updated-dependencies:
- dependency-name: com.jfrog.artifactory
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: com.google.cloud:libraries-bom
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: org.springframework:spring-context
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: org.springframework:spring-web
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: org.springframework.shell:spring-shell-starter
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: org.springframework.boot
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: com.azure:azure-messaging-servicebus
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
- dependency-name: com.azure:azure-identity
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: minor-patch-dependencies
- dependency-name: io.netty:netty-bom
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: minor-patch-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>

* Set commons-compress to 1.25 for compatibilty with the spring boot plugin (see spring-projects/spring-pulsar#560)

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: aherbst-broad <[email protected]>

Author: dependabot[bot]

build.gradle

@@ -2,7 +2,7 @@ plugins {
     id 'idea'
     id 'maven-publish'
 
-    id 'com.jfrog.artifactory' version '5.2.0'
+    id 'com.jfrog.artifactory' version '5.2.2'
     id "org.sonarqube" version "5.0.0.4638"
 }
 

buildSrc/build.gradle

@@ -11,4 +11,5 @@ repositories {
 dependencies {
     implementation group: 'com.diffplug.spotless', name: 'spotless-plugin-gradle', version: '6.25.0'
     implementation group: 'com.srcclr.gradle', name: 'com.srcclr.gradle.gradle.plugin', version: '3.1.12'
+    implementation group: 'org.apache.commons', name: 'commons-compress', version: '1.25.0'
 }

stairctl/build.gradle

@@ -4,7 +4,7 @@ plugins {
 
     id 'io.spring.dependency-management' version '1.1.5'
     // Spring Boot and Spring Shell versions should stay in sync
-    id 'org.springframework.boot' version '3.2.5'
+    id 'org.springframework.boot' version '3.3.1'
 }
 
 version = gradle.version
@@ -21,5 +21,5 @@ dependencies {
     // Spring
     implementation group: 'org.springframework.boot', name: 'spring-boot-starter'
     // Spring Boot and Spring Shell versions should stay in sync
-    implementation group: 'org.springframework.shell', name: 'spring-shell-starter', version: '3.2.5'
+    implementation group: 'org.springframework.shell', name: 'spring-shell-starter', version: '3.3.1'
 }

stairway-azure/build.gradle

@@ -8,11 +8,11 @@ dependencies {
     implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.14.0'
 
     //Azure service bus dependencies
-    implementation 'com.azure:azure-messaging-servicebus:7.17.0'
-    implementation 'com.azure:azure-identity:1.12.1'
+    implementation 'com.azure:azure-messaging-servicebus:7.17.1'
+    implementation 'com.azure:azure-identity:1.13.0'
     // Azure dependencies pull in out-of-date, vulnerable io.netty dependencies.
     // If they update them in a future release, this may be removed:
-    implementation platform('io.netty:netty-bom:4.1.110.Final')
+    implementation platform('io.netty:netty-bom:4.1.111.Final')
 
     testImplementation 'org.mockito:mockito-junit-jupiter:5.12.0'
 }

stairway-gcp/build.gradle

@@ -8,7 +8,7 @@ dependencies {
     implementation group: 'org.apache.commons', name: 'commons-lang3', version: '3.14.0'
 
     // Google dependencies
-    implementation platform('com.google.cloud:libraries-bom:26.40.0') // use common bom
+    implementation platform('com.google.cloud:libraries-bom:26.42.0') // use common bom
     implementation group: 'com.google.cloud', name: 'google-cloud-pubsub'
 }
 

stairway/build.gradle

@@ -18,8 +18,8 @@ dependencies {
     implementation group: 'org.openapitools', name: 'jackson-databind-nullable', version: '0.2.6'
 
     // Spring
-    implementation group: 'org.springframework', name: 'spring-context', version: '6.1.8'
-    implementation group: 'org.springframework', name: 'spring-web', version: '6.1.8'
+    implementation group: 'org.springframework', name: 'spring-context', version: '6.1.10'
+    implementation group: 'org.springframework', name: 'spring-web', version: '6.1.10'
 
     // Annotations
     implementation group: 'jakarta.annotation', name: 'jakarta.annotation-api', version: '3.0.0'
@@ -28,7 +28,7 @@ dependencies {
     implementation group: 'org.liquibase', name: 'liquibase-core', version: '4.28.0'
 
     // Google dependencies
-    implementation platform('com.google.cloud:libraries-bom:26.40.0') // use common bom
+    implementation platform('com.google.cloud:libraries-bom:26.42.0') // use common bom
     implementation group: 'com.google.cloud', name: 'google-cloud-pubsub'
 
     // File handling during testing