chore: update all dependencies to latest stable, remove jgit-proxy-spring module

Dependency updates:
- JGit: 7.0.0 -> 7.6.0
- Jetty: 12.0.22 -> 12.0.33
- Jersey: 3.1.9 -> 3.1.11 (staying on 3.1.x for Jakarta EE 10 compatibility)
- Jackson: 2.18.2 -> 2.18.6 (latest stable 2.18.x; switch to BOM for version alignment)
- HikariCP: 6.2.1 -> 7.0.2
- H2: 2.3.232 -> 2.4.240
- SQLite JDBC: 3.47.2.0 -> 3.51.3.0
- PostgreSQL: 42.7.4 -> 42.7.10
- MongoDB: 5.3.1 -> 5.6.4
- Logback: 1.5.18 -> 1.5.32
- BouncyCastle: 1.79 -> 1.83
- commons-validator: 1.9.0 -> 1.10.1
- Lombok: 1.18.34 -> 1.18.44
- JUnit Jupiter: 5.10.0 -> 5.14.3
- httpclient: 4.5.13 -> 4.5.14
- Spotless plugin: 6.25.0 -> 8.4.0
- Palantir Java Format: 2.51.0 -> 2.90.0

Use Jackson BOM (jackson-bom) in both modules so all Jackson artifacts
(databind, annotations, datatype-jsr310, jersey-media-json-jackson transitive
deps) are pinned to the same version.

Remove jgit-proxy-spring: the Spring Boot port was an early prototype and
is superseded by jgit-proxy-server (Jetty + Jersey). Also remove Spring
Boot and dependency-management plugins from root build.gradle.

Co-Authored-By: Claude Sonnet 4.6 <noreply@anthropic.com>

Author: coopernetes

build.gradle

@@ -1,11 +1,9 @@
 plugins {
-    id 'com.diffplug.spotless' version '6.25.0' apply false
-    id 'org.springframework.boot' version '3.4.2' apply false
-    id 'io.spring.dependency-management' version '1.1.6' apply false
+    id 'com.diffplug.spotless' version '8.4.0' apply false
 }
 
 ext {
-    palantirJavaFormatVersion = '2.51.0'
+    palantirJavaFormatVersion = '2.90.0'
 }
 
 allprojects {

jgit-proxy-core/build.gradle

@@ -22,18 +22,18 @@ repositories {
 }
 
 ext {
-    jgitVersion = '7.0.0.202409031743-r'
-    apacheHttpVersion = '4.5.13'
+    jgitVersion = '7.6.0.202603022253-r'
+    apacheHttpVersion = '4.5.14'
     httpProxyServletVersion = '2.0'
-    jettyVersion = '12.0.22'
+    jettyVersion = '12.0.33'
     jakartaServletVersion = '6.1.0'
     slf4jVersion = '2.0.17'
-    logbackVersion = '1.5.18'
-    hikariVersion = '6.2.1'
-    h2Version = '2.3.232'
-    sqliteVersion = '3.47.2.0'
-    postgresVersion = '42.7.4'
-    mongoVersion = '5.3.1'
+    logbackVersion = '1.5.32'
+    hikariVersion = '7.0.2'
+    h2Version = '2.4.240'
+    sqliteVersion = '3.51.3.0'
+    postgresVersion = '42.7.10'
+    mongoVersion = '5.6.4'
 }
 
 dependencies {
@@ -44,11 +44,11 @@ dependencies {
     api "jakarta.annotation:jakarta.annotation-api:3.0.0"
 
     // Apache Commons Validator for email validation
-    implementation "commons-validator:commons-validator:1.9.0"
-    
+    implementation "commons-validator:commons-validator:1.10.1"
+
     // BouncyCastle for GPG signature verification
-    implementation "org.bouncycastle:bcprov-jdk18on:1.79"
-    implementation "org.bouncycastle:bcpg-jdk18on:1.79"
+    implementation "org.bouncycastle:bcprov-jdk18on:1.83"
+    implementation "org.bouncycastle:bcpg-jdk18on:1.83"
 
     // JGit dependencies
     api "org.eclipse.jgit:org.eclipse.jgit:${jgitVersion}"
@@ -61,9 +61,10 @@ dependencies {
     // Proxy Servlet
     api "org.mitre.dsmiley.httpproxy:smiley-http-proxy-servlet:${httpProxyServletVersion}"
 
-    // Jackson for JSON
-    api "com.fasterxml.jackson.core:jackson-annotations:2.18.2"
-    implementation "com.fasterxml.jackson.core:jackson-databind:2.18.2"
+    // Jackson for JSON — BOM pins all jackson-* modules to the same version
+    api platform("com.fasterxml.jackson:jackson-bom:2.18.6")
+    api "com.fasterxml.jackson.core:jackson-annotations"
+    implementation "com.fasterxml.jackson.core:jackson-databind"
 
     // Logging
     implementation "ch.qos.logback:logback-core:${logbackVersion}"
@@ -88,12 +89,12 @@ dependencies {
     compileOnly "org.mongodb:mongodb-driver-sync:${mongoVersion}"
 
     // Lombok
-    compileOnly 'org.projectlombok:lombok:1.18.34'
-    annotationProcessor 'org.projectlombok:lombok:1.18.34'
+    compileOnly 'org.projectlombok:lombok:1.18.44'
+    annotationProcessor 'org.projectlombok:lombok:1.18.44'
 
     // Testing
-    testImplementation 'org.junit.jupiter:junit-jupiter-api:5.10.0'
-    testRuntimeOnly 'org.junit.jupiter:junit-jupiter-engine:5.10.0'
+    testImplementation 'org.junit.jupiter:junit-jupiter-api:5.14.3'
+    testRuntimeOnly 'org.junit.jupiter:junit-jupiter-engine:5.14.3'
     testRuntimeOnly "com.h2database:h2:${h2Version}"
 }
 

jgit-proxy-server/build.gradle

@@ -56,24 +56,27 @@ dependencies {
     implementation 'org.yaml:snakeyaml:2.2'
 
     // Jersey JAX-RS for the REST API (registered as a plain Jetty servlet alongside JGit)
-    implementation 'org.glassfish.jersey.containers:jersey-container-servlet:3.1.9'
-    implementation 'org.glassfish.jersey.media:jersey-media-json-jackson:3.1.9'
-    implementation 'org.glassfish.jersey.inject:jersey-hk2:3.1.9'
-    implementation 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.18.2'
+    implementation 'org.glassfish.jersey.containers:jersey-container-servlet:3.1.11'
+    implementation 'org.glassfish.jersey.media:jersey-media-json-jackson:3.1.11'
+    implementation 'org.glassfish.jersey.inject:jersey-hk2:3.1.11'
+
+    // Jackson BOM — overrides transitive Jackson versions from Jersey to keep all modules in sync
+    implementation platform('com.fasterxml.jackson:jackson-bom:2.18.6')
+    implementation 'com.fasterxml.jackson.datatype:jackson-datatype-jsr310'
 
     // Database drivers - include all so standalone Jetty server can use any backend
-    runtimeOnly 'com.h2database:h2:2.3.232'
-    runtimeOnly 'org.xerial:sqlite-jdbc:3.47.2.0'
-    runtimeOnly 'org.postgresql:postgresql:42.7.4'
-    runtimeOnly 'org.mongodb:mongodb-driver-sync:5.3.1'
+    runtimeOnly 'com.h2database:h2:2.4.240'
+    runtimeOnly 'org.xerial:sqlite-jdbc:3.51.3.0'
+    runtimeOnly 'org.postgresql:postgresql:42.7.10'
+    runtimeOnly 'org.mongodb:mongodb-driver-sync:5.6.4'
 
     // Lombok
-    compileOnly 'org.projectlombok:lombok:1.18.34'
-    annotationProcessor 'org.projectlombok:lombok:1.18.34'
+    compileOnly 'org.projectlombok:lombok:1.18.44'
+    annotationProcessor 'org.projectlombok:lombok:1.18.44'
 
     // Testing
-    testImplementation 'org.junit.jupiter:junit-jupiter-api:5.10.0'
-    testRuntimeOnly 'org.junit.jupiter:junit-jupiter-engine:5.10.0'
+    testImplementation 'org.junit.jupiter:junit-jupiter-api:5.14.3'
+    testRuntimeOnly 'org.junit.jupiter:junit-jupiter-engine:5.14.3'
 }
 
 tasks.named('test') {