fix(deps): bump org.apache.tomcat.embed:tomcat-embed-core minimum version to 11.0.25 (GHSA-gcx9-497g-6cp6) (#406)

Co-authored-by: Claude <noreply@anthropic.com>
Co-authored-by: Catarina Pinheiro Correia <catarina.correia@getyourguide.com>

Author: 3 people

build.gradle

@@ -44,9 +44,9 @@ subprojects {
                 because('GHSA-p47f-322f-whfh / GHSA-jhq6-gfmj-v8fx: logback-core deserialization of untrusted data / object injection')
             }
             if (requested.group == 'org.apache.tomcat.embed' && requested.name == 'tomcat-embed-core'
-                    && requested.version != null && requested.version < '11.0.22') {
-                useVersion('11.0.22')
-                because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6 / GHSA-gx5v-xp9w-j4cg: Apache Tomcat < 11.0.22 vulnerabilities')
+                    && requested.version != null && requested.version < '11.0.25') {
+                useVersion('11.0.25')
+                because('GHSA-rv64-5gf8-9qq8 / GHSA-x4m4-345f-5h5g / GHSA-24j9-x2wg-9qv6 / GHSA-gx5v-xp9w-j4cg / GHSA-gcx9-497g-6cp6: Apache Tomcat < 11.0.25 vulnerabilities')
             }
             if (requested.group == 'io.netty'
                     && requested.version != null && requested.version < '4.2.17.Final') {

examples/example-spring-boot-starter-web/build.gradle

@@ -10,7 +10,7 @@ ext['jackson-2-bom.version'] = '2.21.5'
 ext['logback.version'] = '1.5.34'
 ext['log4j2.version'] = '2.25.5'
 ext['netty.version'] = '4.2.17.Final'
-ext['tomcat.version'] = '11.0.22'
+ext['tomcat.version'] = '11.0.25'
 ext['spring-framework.version'] = '7.0.8'
 
 dependencies {

examples/example-spring-boot-starter-webflux/build.gradle

@@ -10,7 +10,7 @@ ext['jackson-2-bom.version'] = '2.21.5'
 ext['logback.version'] = '1.5.34'
 ext['log4j2.version'] = '2.25.5'
 ext['netty.version'] = '4.2.17.Final'
-ext['tomcat.version'] = '11.0.22'
+ext['tomcat.version'] = '11.0.25'
 ext['spring-framework.version'] = '7.0.8'
 
 dependencies {