Merge branch '1.9.x' into 1.10.x

Author: jonatan-ivanov

gradle/libs.versions.toml

@@ -25,11 +25,11 @@ h2 = "2.2.224"
 hazelcast = "5.2.4"
 hazelcast3 = "3.12.13"
 hdrhistogram = "2.1.12"
-hibernate = "5.6.12.Final"
+hibernate = "5.6.15.Final"
 # 2.6.0 requires JDK 11
 hsqldb = "2.5.2"
 httpcomponents-async = "4.1.5"
-httpcomponents-client = "4.5.13"
+httpcomponents-client = "4.5.14"
 # metrics are better with https://github.com/Netflix/Hystrix/pull/1568 introduced
 # in hystrix 1.5.12, but Netflix re-released 1.5.11 as 1.5.18 late in 2018.
 # <=1.5.11 or 1.5.18 doesn't break with Micrometer, but open metrics won't be correct necessarily.
@@ -38,7 +38,7 @@ jackson-databind = "2.14.2"
 javax-cache = "1.1.1"
 javax-inject = "1"
 jaxb = "2.3.1"
-jetty = "9.4.49.v20220914"
+jetty = "9.4.52.v20230823"
 jetty11 = "11.0.12"
 jersey2 = "2.37"
 jersey3 = "3.0.8"
@@ -56,20 +56,20 @@ log4j = "2.19.0"
 maven-resolver = "1.8.2"
 mockito = "5.5.0"
 mongo = "4.8.2"
-netty = "4.1.97.Final"
+netty = "4.1.99.Final"
 newrelic-api = "5.14.0"
-okhttp = "5.0.0-alpha.10" # TODO is compiling against an alpha version intentional?
+okhttp = "5.0.0-alpha.11" # TODO is compiling against an alpha version intentional?
 postgre = "42.5.0"
 prometheus = "0.16.0"
-reactor = "2020.0.35"
-rest-assured = "5.3.0"
+reactor = "2020.0.36"
+rest-assured = "5.3.2"
 signalfx = "1.0.35"
 slf4j = "1.7.36"
 spectator-atlas = "1.3.10"
 spring = "5.3.30"
 spring-javaformat = "0.0.39"
 testcontainers = "1.19.1"
-tomcat = "8.5.82"
+tomcat = "8.5.93"
 wavefront = "3.0.4"
 # pinned to avoid issues with shaded slf4j version - see gh-3414
 wiremock = "2.33.2"