fix(deps): update dependency org.http4k:http4k-bom to 5.41.+

[renovate]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
org.http4k:http4k-bom (source)	5.38.+ -> 5.41.+

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

http4k/http4k (org.http4k:http4k-bom)

v5.41.0.0

Compare Source

• http4k-format-xml : [Fix CVE-2024-55875: Possible Break] Fixed XML processing by disabling entity expansion in DocumentBuilderFactory configuration.
  Note: This change affects how XML entity references are handled. If your code relies on XML entity expansion (like
  replacing &entity; references with their defined content), it will need to be updated to provide the correct configuration when deserialising the XML body.
  Entity references will now remain as unexpanded text in the document.

Full details at: https://www.http4k.org/security/cve-2024-12345/

H/T to @​@​JAckLosingHeart for the report.

v5.40.0.0

Compare Source

• http4k-core : Allow invalidation of cookie with a path. H/T @​ollieabbey
• http4k-core : Allow setting cookie value without quotes. H/T @​ollieabbey
• http4k-core : Fix cookie format for cookie with no attributes. H/T @​ollieabbey
• http4k-testing-webdriver : Remove usages of deprecated getAttribute API. Now use getDomAttribute instead.
• http4k-cloudnative : [Breaking] Deprecation of various functions and re-homing into http4k-platform-k8s module. Some classes and functions have been repackaged.
• http4k-* : [PRE RELEASE PREPARATION] As a part of the upcoming V6, several modules are being rehoused to new Maven coordinates within http4k Community edition (and retaining the Apache2 license). In preparation, we have introduced these modules to give users the time to migrate without taking on-board other breaking changes from v6 - essentially allowing the upgrade cycle to be:

1. Upgrade to latest v5 release. Deal with deprecations and module changes.
2. Upgrade to v6 when it is released. Deal with other breaking changes. We expect these to be mainly imports and will be detailed in the v6 release note when we have the chance. In the meantime, this is the list of modules that are being rehoused:

SOURCE MODULE - v5.X.X.X	DESTINATION MODULE(S) - v6.X.X.X
http4k-aws	http4k-platform-aws
http4k-azure	http4k-platform-azure
http4k-cloudevents	http4k-api-cloudevents
http4k-cloudnative	Split into http4k-config, http4k-platform-core, http4k-platform-k8s
http4k-contract	http4k-api-openapi
http4k-contract-jsonschema	http4k-api-jsonschema
http4k-contract-ui-redoc	http4k-api-ui-redoc
http4k-contract-ui-swagger	http4k-api-ui-swagger
http4k-failsafe	http4k-ops-failsafe
http4k-gcp	http4k-platform-gcp
http4k-graphql	http4k-api-graphql
http4k-htmx	http4k-web-htmx
http4k-jsonrpc	http4k-api-jsonrpc
http4k-metrics-micrometer	http4k-ops-micrometer
http4k-opentelemetry	http4k-ops-opentelemetry
http4k-resilience4j	http4k-ops-resilience4j

v5.39.0.0

Compare Source

• http4k-* : Upgrade some dependency versions.
• http4k-amazon-*-fake : [Unlikely break] Rename AmazonRestfulFake to AmazonRestJsonFake
• http4k-amazon-evidently-fake : Fixed Project status value to be a valid value instead of an empty string

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.