Bump dependency versions

gradle.properties

@@ -57,7 +57,7 @@ windowsProteomicsBinariesVersion=1.0
 artifactoryPluginVersion=5.2.5
 gradleNodePluginVersion=7.1.0
 gradlePluginsVersion=8.1.0
-owaspDependencyCheckPluginVersion=12.2.1
+owaspDependencyCheckPluginVersion=12.2.2
 
 # Versions of node and npm to use during the build. If set, these versions
 # will be downloaded and used. If not set, the existing local installations will be used
@@ -87,7 +87,7 @@ angusMailVersion=2.0.5
 
 annotationsVersion=15.0
 
-antVersion=1.10.15
+antVersion=1.10.17
 
 antlrST4Version=4.3.4
 
@@ -123,14 +123,14 @@ commonmarkVersion=0.28.0
 # the beanutils version is not the default version brought from commons-validator and/or commons-digester
 # in the :server:api module but is required for some of our code to compile
 commonsBeanutilsVersion=1.11.0
-commonsCodecVersion=1.21.0
+commonsCodecVersion=1.22.0
 commonsCollections4Version=4.5.0
 commonsCollectionsVersion=3.2.2
 commonsCompressVersion=1.28.0
 commonsDbcpVersion=1.4
 commonsDigesterVersion=1.8.1
 commonsDiscoveryVersion=0.2
-commonsIoVersion=2.21.0
+commonsIoVersion=2.22.0
 commonsLang3Version=3.20.0
 commonsLangVersion=2.6
 commonsLoggingVersion=1.3.6
@@ -140,7 +140,7 @@ commonsTextVersion=1.15.0
 commonsValidatorVersion=1.10.1
 commonsVfs2Version=2.10.0
 
-datadogVersion=1.61.0
+datadogVersion=1.62.0
 
 dom4jVersion=2.2.0
 
@@ -164,7 +164,7 @@ googleOauthClientVersion=1.39.0
 googleProtocolBufVersion=3.25.9
 
 graphSupportVersion=1.5.2
-grpcVersion=1.80.0
+grpcVersion=1.81.0
 
 # Cloud and SequenceAnalysis bring gson in as a transitive dependency.
 # We resolve to the later version here to keep things consistent
@@ -196,15 +196,15 @@ httpcoreVersion=4.4.16
 intellijKotlinVersion=2.3.10
 
 # Update the three Jackson dependency versions below in tandem, unless one gets a patch release out-of-sync with the others
-jacksonVersion=2.21.2
-jacksonDatabindVersion=2.21.2
-jacksonJaxrsBaseVersion=2.21.2
+jacksonVersion=2.21.3
+jacksonDatabindVersion=2.21.3
+jacksonJaxrsBaseVersion=2.21.3
 
 # Note the inconsistent version numbering for "annotations"... it no longer matches the above
 jacksonAnnotationsVersion=2.21
 
 # Spring Boot brings in a transitive dependency on Jackson 3.x. It has changed package names and can coexist with Jackson 2.x.
-jackson3Version=3.1.1
+jackson3Version=3.1.3
 
 # The Jakarta Activation API version that Angus Activation implements. Keep in sync with angusActivationVersion (above).
 jakartaActivationApiVersion=2.1.4
@@ -242,7 +242,7 @@ jsr305Version=3.0.2
 
 orgJsonVersion=20251224
 
-jsoupVersion=1.22.1
+jsoupVersion=1.22.2
 
 junitVersion=4.13.2
 
@@ -252,7 +252,7 @@ kaptchaVersion=2.3
 
 log4j2Version=2.25.4
 
-lombokVersion=1.18.44
+lombokVersion=1.18.46
 
 luceneVersion=10.4.0
 

server/embedded/src/main/resources/log4j2.xml

@@ -222,6 +222,9 @@
         <!-- Suppress POI's PackageRelationshipCollection's "Cannot convert {} in a valid relationship URI" URISyntaxExceptions, Issue 51960 -->
         <Logger name="org.apache.poi.openxml4j.opc.PackageRelationshipCollection" level="fatal"/>
 
+        <!-- Suppress IOUtils logging of errors in closeQuietly(). (I'm curious, what's your definition of "quiet", IOUtils?) GitHub Issue 1089 -->
+        <Logger name="org.apache.poi.util.IOUtils" level="fatal"/>
+
         <!-- Suppress some noisy FontBox and POI classes that log warnings during document text extraction -->
         <Logger name="org.apache.fontbox.ttf.CmapSubtable" level="error"/>
         <Logger name="org.apache.fontbox.ttf.PostScriptTable" level="error"/>