cleanup dependencies

Signed-off-by: liga-oz <[email protected]>

CHANGELOG.md

@@ -1,6 +1,22 @@
 # Change Log
 All notable changes to this project will be documented in this file.
 
+## 3.3.3
+- [java-security]
+  - reduce `HybridTokenFactory` logging noise - in case of missing service configuration warn message will be logged just once 
+- [java-security-test]
+  - fixes version mismatch issue when jetty BoM is used
+  - `JwtGenerator` ensures that claims are always in the same order
+- [token-client]
+  - remove httpclient caching from DefaultHttpClientFactory (#1416)
+
+#### Dependency upgrades
+- Bump spring.boot.version from 3.2.0 to 3.2.1
+- Bump spring.core.version from 6.0.14 to 6.1.2
+- Bump log4j2.version from 2.22.0 to 2.22.1
+- Bump slf4j.api.version from 2.0.9 to 2.0.10
+
+
 ## 3.3.2
 - [java-security]
   - add `name` property of service binding as property to OAuth2ServiceConfiguration

pom.xml

@@ -105,12 +105,6 @@
 
 	<dependencyManagement>
 		<dependencies>
-			<!--		To be removed once spring boot updates spring-core dependencies to 6.0.8-->
-			<dependency>
-				<groupId>org.springframework</groupId>
-				<artifactId>spring-expression</artifactId>
-				<version>${spring.core.version}</version>
-			</dependency>
 			<!-- Project BOM -->
 			<dependency>
 				<groupId>com.sap.cloud.security</groupId>

spring-xsuaa-starter/pom.xml

@@ -31,20 +31,6 @@
 	</properties>
 
 	<dependencies>
-		<!--		TODO remove once spring-boot-parent upadtes logback version-->
-		<dependency>
-			<groupId>ch.qos.logback</groupId>
-			<artifactId>logback-core</artifactId>
-			<version>1.4.14</version>
-			<scope>provided</scope>
-		</dependency>
-		<!--		TODO remove once spring-boot-parent upadtes logback version-->
-		<dependency>
-			<groupId>ch.qos.logback</groupId>
-			<artifactId>logback-classic</artifactId>
-			<version>1.4.14</version>
-			<scope>provided</scope>
-		</dependency>
 		<dependency>
 			<groupId>org.springframework.boot</groupId>
 			<artifactId>spring-boot-starter</artifactId>