chore(deps): bump the production-dependencies group across 1 director…

…y with 2 updates (#3078)

bonita-engine/build.gradle

@@ -48,7 +48,14 @@ dependencyManagement {
             entry 'httpmime'
         }
         dependency libs.xstream.get() as String
-        dependency libs.tomcatDbcp.get() as String
+        dependencySet(group: 'org.apache.tomcat', version: libs.versions.tomcatVersion.get()) {
+            entry 'tomcat-dbcp'
+            entry 'tomcat'
+            entry 'tomcat-catalina'
+        }
+        dependencySet(group: 'org.apache.tomcat.embed', version: libs.versions.tomcatVersion.get()) {
+            entry 'tomcat-embed-core'
+        }
         dependency libs.narayanaJta.get() as String
         dependency libs.jakartaActivation.get() as String
         dependency(libs.quartz.get() as String)

gradle/libs.versions.toml

@@ -11,7 +11,7 @@ commonsIOVersion = "2.16.1"
 commonsFileUploadVersion = "1.5"
 commonsBeanutilsVersion = "1.9.4"
 commonsCollectionsVersion = "4.4"
-tomcatDbcpVersion = "9.0.90"
+tomcatVersion = "9.0.91"
 commonsCLIVersion = "1.8.0"
 semver4jVersion = '3.1.0'
 slf4jVersion = "1.7.36"
@@ -21,7 +21,7 @@ hibernateVersion = "5.4.33"
 javassistVersion = "3.27.0-GA"
 # javax.persistence-api is used by hibernate:
 javaxPersistenceApiVersion = "2.2"
-jacksonBomVersion = "2.17.1"
+jacksonBomVersion = "2.17.2"
 jakartaTransactionVersion = "1.3.3"
 jakartaServletVersion = "4.0.4"
 # Keep this until all client projects have migrated to jakarta or it will break their builds !
@@ -103,7 +103,7 @@ commonsIO = { group = "commons-io", name = "commons-io", version.ref = "commonsI
 commonsFileUpload = { group = "commons-fileupload", name = "commons-fileupload", version.ref = "commonsFileUploadVersion" }
 commonsBeanUtils = { group = "commons-beanutils", name = "commons-beanutils", version.ref = "commonsBeanutilsVersion" }
 commonsCollections = { group = "org.apache.commons", name = "commons-collections4", version.ref = "commonsCollectionsVersion" }
-tomcatDbcp = { group = "org.apache.tomcat", name = "tomcat-dbcp", version.ref = "tomcatDbcpVersion" }
+tomcatDbcp = { group = "org.apache.tomcat", name = "tomcat-dbcp", version.ref = "tomcatVersion" }
 commonsCLI = { group = "commons-cli", name = "commons-cli", version.ref = "commonsCLIVersion" }
 semver4j = { group = "com.vdurmont", name = "semver4j", version.ref = "semver4jVersion" }
 slf4jApi = { group = "org.slf4j", name = "slf4j-api", version.ref = "slf4jVersion" }