From 60678445787bcf9ac838e811db2bd636a269204d Mon Sep 17 00:00:00 2001
From: liga-oz <liga.ozolina@sap.com>
Date: Fri, 5 Jan 2024 10:04:48 +0100
Subject: [PATCH] cleanup dependencies

Signed-off-by: liga-oz <liga.ozolina@sap.com>
---
 CHANGELOG.md                 | 16 ++++++++++++++++
 pom.xml                      |  6 ------
 spring-xsuaa-starter/pom.xml | 14 --------------
 3 files changed, 16 insertions(+), 20 deletions(-)

diff --git a/CHANGELOG.md b/CHANGELOG.md
index 2f43e739a..cd416123f 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -1,6 +1,22 @@
 # Change Log
 All notable changes to this project will be documented in this file.
 
+## 3.3.3
+- [java-security]
+  - reduce `HybridTokenFactory` logging noise - in case of missing service configuration warn message will be logged just once 
+- [java-security-test]
+  - fixes version mismatch issue when jetty BoM is used
+  - `JwtGenerator` ensures that claims are always in the same order
+- [token-client]
+  - remove httpclient caching from DefaultHttpClientFactory (#1416)
+
+#### Dependency upgrades
+- Bump spring.boot.version from 3.2.0 to 3.2.1
+- Bump spring.core.version from 6.0.14 to 6.1.2
+- Bump log4j2.version from 2.22.0 to 2.22.1
+- Bump slf4j.api.version from 2.0.9 to 2.0.10
+
+
 ## 3.3.2
 - [java-security]
   - add `name` property of service binding as property to OAuth2ServiceConfiguration
diff --git a/pom.xml b/pom.xml
index d9290c5c9..9f508a2fe 100644
--- a/pom.xml
+++ b/pom.xml
@@ -105,12 +105,6 @@
 
 	<dependencyManagement>
 		<dependencies>
-			<!--		To be removed once spring boot updates spring-core dependencies to 6.0.8-->
-			<dependency>
-				<groupId>org.springframework</groupId>
-				<artifactId>spring-expression</artifactId>
-				<version>${spring.core.version}</version>
-			</dependency>
 			<!-- Project BOM -->
 			<dependency>
 				<groupId>com.sap.cloud.security</groupId>
diff --git a/spring-xsuaa-starter/pom.xml b/spring-xsuaa-starter/pom.xml
index 6778272ac..3a63a5d5c 100644
--- a/spring-xsuaa-starter/pom.xml
+++ b/spring-xsuaa-starter/pom.xml
@@ -31,20 +31,6 @@
 	</properties>
 
 	<dependencies>
-		<!--		TODO remove once spring-boot-parent upadtes logback version-->
-		<dependency>
-			<groupId>ch.qos.logback</groupId>
-			<artifactId>logback-core</artifactId>
-			<version>1.4.14</version>
-			<scope>provided</scope>
-		</dependency>
-		<!--		TODO remove once spring-boot-parent upadtes logback version-->
-		<dependency>
-			<groupId>ch.qos.logback</groupId>
-			<artifactId>logback-classic</artifactId>
-			<version>1.4.14</version>
-			<scope>provided</scope>
-		</dependency>
 		<dependency>
 			<groupId>org.springframework.boot</groupId>
 			<artifactId>spring-boot-starter</artifactId>