From 577da5c5b780ae8e12929a88985135e4050ba503 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 22 Apr 2026 15:34:49 +0000
Subject: [PATCH] chore(deps): bump the maven group across 1 directory with 2
 updates

Bumps the maven group with 2 updates in the / directory: org.apache.logging.log4j:log4j-core and org.apache.spark:spark-core_2.12.


Updates `org.apache.logging.log4j:log4j-core` from 2.17.2 to 2.25.4

Updates `org.apache.spark:spark-core_2.12` from 3.2.2 to 3.5.7

Updates `org.apache.logging.log4j:log4j-core` from 2.17.2 to 2.25.4

Updates `org.apache.logging.log4j:log4j-core` from 2.17.2 to 2.25.4

Updates `org.apache.logging.log4j:log4j-core` from 2.17.2 to 2.25.4

Updates `org.apache.logging.log4j:log4j-core` from 2.17.2 to 2.25.4

Updates `org.apache.logging.log4j:log4j-core` from 2.17.2 to 2.25.4

Updates `org.apache.logging.log4j:log4j-core` from 2.17.2 to 2.25.4

Updates `org.apache.logging.log4j:log4j-core` from 2.17.2 to 2.25.4

Updates `org.apache.logging.log4j:log4j-core` from 2.17.2 to 2.25.4

Updates `org.apache.logging.log4j:log4j-core` from 2.17.2 to 2.25.4

Updates `org.apache.logging.log4j:log4j-core` from 2.17.2 to 2.25.4

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.spark:spark-core_2.12
  dependency-version: 3.5.7
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .../component-runtime-beam-junit/pom.xml                      | 2 +-
 .../component-runtime-http-junit/pom.xml                      | 2 +-
 component-runtime-testing/component-runtime-junit/pom.xml     | 2 +-
 .../component-runtime-testing-spark/pom.xml                   | 4 ++--
 pom.xml                                                       | 2 +-
 singer-parent/component-kitap/pom.xml                         | 2 +-
 6 files changed, 7 insertions(+), 7 deletions(-)

diff --git a/component-runtime-testing/component-runtime-beam-junit/pom.xml b/component-runtime-testing/component-runtime-beam-junit/pom.xml
index 30094dbb6be25..0ab8562893965 100644
--- a/component-runtime-testing/component-runtime-beam-junit/pom.xml
+++ b/component-runtime-testing/component-runtime-beam-junit/pom.xml
@@ -30,7 +30,7 @@
   <properties>
     <talend.build.name>${talend.build.name.base}.junit.beam</talend.build.name>
     <!-- 4.0.1 breaks shrinkwrap -->
-    <plexus-utils.version>3.6.1</plexus-utils.version>
+    <plexus-utils.version>4.0.3</plexus-utils.version>
   </properties>
 
   <dependencies>
diff --git a/component-runtime-testing/component-runtime-http-junit/pom.xml b/component-runtime-testing/component-runtime-http-junit/pom.xml
index 8b24af293f896..ff1b48751c574 100644
--- a/component-runtime-testing/component-runtime-http-junit/pom.xml
+++ b/component-runtime-testing/component-runtime-http-junit/pom.xml
@@ -28,7 +28,7 @@
   <description>JUnit integration to simplify the HTTP API testing/mocking.</description>
 
   <properties>
-    <netty.version>4.1.132.Final</netty.version>
+    <netty.version>4.2.12.Final</netty.version>
     <talend.build.name>${talend.build.name.base}.junit.http</talend.build.name>
   </properties>
 
diff --git a/component-runtime-testing/component-runtime-junit/pom.xml b/component-runtime-testing/component-runtime-junit/pom.xml
index 55bc2fb141948..126f751c6355e 100644
--- a/component-runtime-testing/component-runtime-junit/pom.xml
+++ b/component-runtime-testing/component-runtime-junit/pom.xml
@@ -30,7 +30,7 @@
   <properties>
     <talend.build.name>${talend.build.name.base}.junit</talend.build.name>
     <!-- 4.0.1 breaks tests -->
-    <plexus-utils.version>3.6.1</plexus-utils.version>
+    <plexus-utils.version>4.0.3</plexus-utils.version>
   </properties>
 
   <dependencies>
diff --git a/component-runtime-testing/component-runtime-testing-spark/pom.xml b/component-runtime-testing/component-runtime-testing-spark/pom.xml
index 5d8b0a5647739..c888af9fac11b 100644
--- a/component-runtime-testing/component-runtime-testing-spark/pom.xml
+++ b/component-runtime-testing/component-runtime-testing-spark/pom.xml
@@ -30,9 +30,9 @@
   <properties>
     <talend.build.name>${talend.build.name.base}.testing.spark</talend.build.name>
     <!-- need to be aligned with the spark version used in the test scope -->
-    <log4j2.version>2.17.2</log4j2.version>
+    <log4j2.version>2.25.4</log4j2.version>
     <!-- 4.0.1 breaks spark -->
-    <plexus-utils.version>3.6.1</plexus-utils.version>
+    <plexus-utils.version>4.0.3</plexus-utils.version>
   </properties>
 
   <dependencies>
diff --git a/pom.xml b/pom.xml
index 9feee6376bb98..7d5142526ebd1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -173,7 +173,7 @@
     <ziplock.test.version>8.0.14</ziplock.test.version>
     <meecrowave.version>1.2.15</meecrowave.version>
     <owb.version>2.0.27</owb.version>
-    <tomcat.version>9.0.117</tomcat.version>
+    <tomcat.version>11.0.21</tomcat.version>
     <cxf.version>3.5.11</cxf.version>
 
     <woodstox.version>6.5.0</woodstox.version>
diff --git a/singer-parent/component-kitap/pom.xml b/singer-parent/component-kitap/pom.xml
index eaa627bc64085..9833ab2c88b62 100644
--- a/singer-parent/component-kitap/pom.xml
+++ b/singer-parent/component-kitap/pom.xml
@@ -31,7 +31,7 @@
     <talend.build.name>${talend.build.name.base}.singer.component</talend.build.name>
     <rat.skip>true</rat.skip>
     <!-- Override spark version to 3.2.2 to fix logback compatibility issues in tests with Spark 3.5.7 -->
-    <spark.version>3.2.2</spark.version>
+    <spark.version>3.5.7</spark.version>
   </properties>
 
   <dependencies>