Bump software.amazon.awssdk:bom from 2.21.20 to 2.54.12

[dependabot]

Bumps software.amazon.awssdk:bom from 2.21.20 to 2.54.12.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[github-actions]

Mend Scan Results

Status: ⚠️ Findings detected

⚠️ SCA findings detected

SCA scan output

Identified 72 dependencies

Detected 2 vulnerabilities (0 Critical, 0 High, 1 Medium, 1 Low)

+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| SEVERITY |    LIBRARY     |      ID       |                                             TOP FIX                                             |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| MEDIUM   | guava-21.0.jar | CVE-2023-2976 | Upgrade to version com.google.guava:guava:32.0.1-android,32.0.1-jre                             |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+
| LOW      | guava-21.0.jar | CVE-2020-8908 | Upgrade to version com.google.guava:guava:32.0.0-android, https://github.com/google/guava.git - |
|          |                |               | v32.0.0                                                                                         |
+----------+----------------+---------------+-------------------------------------------------------------------------------------------------+


Paths at risk

P = policy violation
MSC = malicious vulnerability
CRITICAL/HIGH/MEDIUM/LOW = vulnerability severity

path-mapped-pathdb-3.3-SNAPSHOT.pom
|-- path-mapped-pathdb-datastax-3.3-SNAPSHOT.jar
	|-- guava-21.0.jar [1 MEDIUM, 1 LOW]
	|-- cassandra-driver-core-3.12.1.jar
		|-- guava-21.0.jar [1 MEDIUM, 1 LOW]
	|-- cassandra-driver-mapping-3.12.1.jar
		|-- guava-21.0.jar [1 MEDIUM, 1 LOW]


No Policy violations were detected

Project 'path-mapped-storage' was updated, for more information, visit the Mend platform: https://ibmets.whitesourcesoftware.com/app/orgs/Enterprise%20Applications/applications/summary?project=a525e644-1c7f-4265-a1f6-f949714f4deb
Or the Core UI: https://ibmets.whitesourcesoftware.com/Wss/WSS.html#!project;token=a6f4fbb9a2544f0c8b6685dec5ba58dee9596f69943146098106ab43cb758822

Mend AI scan succeeded.

Support Token: 2ccfb194638cb4d6cb79c1da7e452dbde1789124574370

SAST scan output

*no findings*

Full logs and artifacts