Updated dependencies and resolving CVEs, bumped SpringBoot to 3.3.5

[madduci]

Updated:

• SpringBoot
• Spring Components
• Jackson
• Log4j
• Logback
• Swagger UI
• Bootstrap
• OpenTelemetry Instrumentation
• Hibernate
• Testcontainers
• MySQL Connector
• PostgreSQL driver
• Oracle11 driver
• ElasticSearch
• GraphQL

[jamesagnew]

Hey @madduci , thanks for the contribution!

Two quick initial comments:

• It looks like this is not compiling cleanly because of the hibernate search bump. That needs to be investigated.
• Can you please create a changes.yaml changelog outlining the dependency bumps we've made? It should go in the 7_8_0 directory. You could use this one as a template: https://github.com/hapifhir/hapi-fhir/blob/9365ad9509a0cf1c7d6dc228dba7470dd78c188a/hapi-fhir-docs/src/main/resources/ca/uhn/hapi/fhir/changelog/6_0_0/changes.yaml

[madduci]

Hello and thanks for reviewing it. I need to perform some corrections, unfortunately it is really slow on my machine. I will apply the requested changes as well.

[jamesagnew]

@madduci it looks like there is still one still failing CI test: GraphQLR4Test. It's failing with a super weird error, I'm having a look to see if I can understand what's up with that.

[madduci]

@jamesagnew thank you very much, I don't have any clue what could be the problem in the test

[jamesagnew]

@madduci FYI I fixed that graphql issue and pushed it in.

It turns out that we have a team internally over here who are working on bumping hibernate already (but not boot or - and they've already rules out the timestampdiff approach for resolving that one issue because it's not cross-database compatible.

I'm going to propose that we let that work get merged and sync it into your branch just to avoid any extra work - We'll get this merged, but it'll be in a few days probably.