Upgrading Netty, Jetty and Spring 6 (#6009)

* Upgrading Netty: 4.1.122.Final to 4.1.125.Final, Jetty from 12.0.22 to 12.0.27, Jetty11: 11.0.25 to 11.0.26 and Spring from 6.0.23 to 6.2.11 to remediate CVE-2024-38820, CVE-2025-5115, CVE-2025-22233, CVE-2025-41234, CVE-2025-41249, CVE-2025-55163, CVE-2025-58056 and CVE-2025-58057

Signed-off-by: Shubham Kalloli <shubham.kalloli@est.tech>

examples/helloworld-spring-webapp/pom.xml

diff --git a/examples/helloworld-spring-webapp/pom.xml b/examples/helloworld-spring-webapp/pom.xml
index 10dc728..d9bb004 100644
--- a/examples/helloworld-spring-webapp/pom.xml
+++ b/examples/helloworld-spring-webapp/pom.xml
@@ -76,6 +76,12 @@
         <dependency>
             <groupId>org.springframework</groupId>
             <artifactId>spring-context</artifactId>
+            <exclusions>
+                <exclusion>
+                    <groupId>io.micrometer</groupId>
+                    <artifactId>micrometer-observation</artifactId>
+                </exclusion>
+            </exclusions>
             <version>${spring6.version}</version>
         </dependency>
         <dependency>

pom.xml

diff --git a/pom.xml b/pom.xml
index 6e22ef8..645d657 100644
--- a/pom.xml
+++ b/pom.xml
@@ -2078,7 +2078,6 @@
                 <artifactId>opentracing-util</artifactId>
                 <version>${opentracing.version}</version>
             </dependency>
-
         </dependencies>
     </dependencyManagement>
 
@@ -2217,7 +2216,7 @@
         <kryo.version>4.0.3</kryo.version>
         <mockito.version>4.11.0</mockito.version> <!-- CQ 17673 -->
         <mustache.version>0.9.14</mustache.version>
-        <netty.version>4.1.122.Final</netty.version>
+        <netty.version>4.1.125.Final</netty.version>
         <opentracing.version>0.33.0</opentracing.version>
         <osgi.version>6.0.0</osgi.version>
         <osgi.framework.version>1.10.0</osgi.framework.version>
@@ -2234,7 +2233,7 @@
 
         <simple.version>6.0.1</simple.version>
         <slf4j.version>2.0.17</slf4j.version>
-        <spring6.version>6.0.23</spring6.version>
+        <spring6.version>6.2.11</spring6.version>
         <testng.version>7.11.0</testng.version>
         <testng6.version>6.14.3</testng6.version>
         <thymeleaf.version>3.1.3.RELEASE</thymeleaf.version>
@@ -2283,9 +2282,9 @@
         <jaxrs.api.spec.version>3.1</jaxrs.api.spec.version>
         <jaxrs.api.impl.version>3.1.0</jaxrs.api.impl.version>
         <jetty.osgi.version>org.eclipse.jetty.*;version="[11,15)"</jetty.osgi.version>
-        <jetty.version>12.0.22</jetty.version>
+        <jetty.version>12.0.27</jetty.version>
         <jetty9.version>9.4.57.v20241219</jetty9.version>
-        <jetty11.version>11.0.25</jetty11.version>
+        <jetty11.version>11.0.26</jetty11.version>
         <jetty.plugin.version>12.0.22</jetty.plugin.version>
         <jsonb.api.version>3.0.1</jsonb.api.version>
         <jsonp.ri.version>1.1.7</jsonp.ri.version>