multiple dependency version updates

workshop/appd/app/pom.xml

@@ -7,7 +7,7 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>3.5.15</version>
+        <version>4.1.1</version>
         <relativePath/>
     </parent>
 
@@ -19,8 +19,10 @@
 
     <properties>
         <java.version>17</java.version>
-        <tomcat.version>10.1.59</tomcat.version>
-        <jackson-bom.version>2.21.6</jackson-bom.version>
+        <tomcat.version>11.0.24</tomcat.version>
+        <jackson-bom.version>3.1.7</jackson-bom.version>
+        <jackson-2-bom.version>2.21.7</jackson-2-bom.version>
+        <spring-framework.version>7.0.9</spring-framework.version>
     </properties>
 
     <dependencies>

workshop/demos/otel-discovery-demo/src/loanservice/build.gradle

@@ -1,6 +1,6 @@
 plugins {
 	id 'java'
-	id 'org.springframework.boot' version '3.5.14'
+	id 'org.springframework.boot' version '4.1.1'
 	id 'io.spring.dependency-management' version '1.1.7'
 }
 
@@ -11,11 +11,10 @@ java {
 	sourceCompatibility = '17'
 }
 
-ext['tomcat.version'] = '10.1.59'
-ext['logback.version'] = '1.5.35'
-ext['jackson-bom.version'] = '2.21.6'
-ext['spring-framework.version'] = '6.2.19'
-ext['spring-kafka.version'] = '3.3.16'
+ext['tomcat.version'] = '11.0.24'
+ext['jackson-bom.version'] = '3.1.7'
+ext['jackson-2-bom.version'] = '2.21.7'
+ext['spring-framework.version'] = '7.0.9'
 
 repositories {
 	mavenCentral()
@@ -27,8 +26,11 @@ dependencies {
 	implementation 'com.mysql:mysql-connector-j'
 	implementation 'org.springframework.kafka:spring-kafka'
 	constraints {
-		implementation('at.yawk.lz4:lz4-java:1.11.1') {
-			because 'CVE-2026-59949'
+		implementation('at.yawk.lz4:lz4-java:1.11.4') {
+			because 'CVE-2026-106451'
+		}
+		implementation('org.springframework.retry:spring-retry:2.0.13') {
+			because 'CVE-2026-41710'
 		}
 	}
 }

workshop/demos/otel-discovery-demo/src/loanservice/gradle/wrapper/gradle-wrapper.properties

@@ -1,6 +1,6 @@
 distributionBase=GRADLE_USER_HOME
 distributionPath=wrapper/dists
-distributionUrl=https\://services.gradle.org/distributions/gradle-8.3-bin.zip
+distributionUrl=https\://services.gradle.org/distributions/gradle-8.14.3-bin.zip
 networkTimeout=10000
 validateDistributionUrl=true
 zipStoreBase=GRADLE_USER_HOME

workshop/profiling/doorgame/pom.xml

@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>3.5.15</version>
+        <version>4.1.1</version>
         <relativePath/>
     </parent>
     <groupId>com.splunk.profiling.workshop</groupId>
@@ -15,8 +15,10 @@
     <description>Door game profiling workshop app</description>
     <properties>
         <java.version>21</java.version>
-        <tomcat.version>10.1.59</tomcat.version>
-        <jackson-bom.version>2.21.6</jackson-bom.version>
+        <tomcat.version>11.0.24</tomcat.version>
+        <jackson-bom.version>3.1.7</jackson-bom.version>
+        <jackson-2-bom.version>2.21.7</jackson-2-bom.version>
+        <spring-framework.version>7.0.9</spring-framework.version>
     </properties>
     <dependencyManagement>
         <dependencies>

workshop/tagging/creditcheckservice-java-with-tags/pom.xml

@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>3.5.15</version>
+        <version>4.1.1</version>
         <relativePath/> <!-- lookup parent from repository -->
     </parent>
     <groupId>com.example</groupId>
@@ -15,8 +15,10 @@
     <description>credit check service</description>
     <properties>
         <java.version>22</java.version>
-        <tomcat.version>10.1.59</tomcat.version>
-        <jackson-bom.version>2.21.6</jackson-bom.version>
+        <tomcat.version>11.0.24</tomcat.version>
+        <jackson-bom.version>3.1.7</jackson-bom.version>
+        <jackson-2-bom.version>2.21.7</jackson-2-bom.version>
+        <spring-framework.version>7.0.9</spring-framework.version>
     </properties>
     <dependencyManagement>
         <dependencies>
@@ -41,6 +43,10 @@
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-web</artifactId>
         </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-restclient</artifactId>
+        </dependency>
         <dependency>
             <groupId>io.opentelemetry</groupId>
             <artifactId>opentelemetry-api</artifactId>

workshop/tagging/creditcheckservice-java-with-tags/src/main/java/com/example/creditcheckservice/CreditCheckApplication.java

@@ -4,7 +4,7 @@
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.context.annotation.Bean;
 import org.springframework.web.client.RestTemplate;
-import org.springframework.boot.web.client.RestTemplateBuilder;
+import org.springframework.boot.restclient.RestTemplateBuilder;
 
 import io.opentelemetry.api.GlobalOpenTelemetry;
 import io.opentelemetry.api.OpenTelemetry;

workshop/tagging/creditcheckservice-java/pom.xml

@@ -5,7 +5,7 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>3.5.15</version>
+        <version>4.1.1</version>
         <relativePath/> <!-- lookup parent from repository -->
     </parent>
     <groupId>com.example</groupId>
@@ -15,8 +15,10 @@
     <description>credit check service</description>
     <properties>
         <java.version>22</java.version>
-        <tomcat.version>10.1.59</tomcat.version>
-        <jackson-bom.version>2.21.6</jackson-bom.version>
+        <tomcat.version>11.0.24</tomcat.version>
+        <jackson-bom.version>3.1.7</jackson-bom.version>
+        <jackson-2-bom.version>2.21.7</jackson-2-bom.version>
+        <spring-framework.version>7.0.9</spring-framework.version>
     </properties>
     <dependencyManagement>
         <dependencies>
@@ -41,6 +43,10 @@
             <groupId>org.springframework.boot</groupId>
             <artifactId>spring-boot-starter-web</artifactId>
         </dependency>
+        <dependency>
+            <groupId>org.springframework.boot</groupId>
+            <artifactId>spring-boot-starter-restclient</artifactId>
+        </dependency>
         <dependency>
             <groupId>io.opentelemetry</groupId>
             <artifactId>opentelemetry-api</artifactId>

workshop/tagging/creditcheckservice-java/src/main/java/com/example/creditcheckservice/CreditCheckApplication.java

@@ -4,7 +4,7 @@
 import org.springframework.boot.autoconfigure.SpringBootApplication;
 import org.springframework.context.annotation.Bean;
 import org.springframework.web.client.RestTemplate;
-import org.springframework.boot.web.client.RestTemplateBuilder;
+import org.springframework.boot.restclient.RestTemplateBuilder;
 
 import io.opentelemetry.api.GlobalOpenTelemetry;
 import io.opentelemetry.api.OpenTelemetry;