Update dependencies (master branch) (#2601)

* Upgrade to OWASP Dependency Check 4.0.2
* Upgrade to JUnit 5.3.2
* Upgrade to NullAway 0.6.4
* Upgrade to ByteBuddy 1.9.7
* Upgrade to Mockito 2.23.4
* Upgrade to Dropwizard Metrics 4.1.0-rc3
* Upgrade to Apache Tomcat JDBC Pool 9.0.14
* Upgrade to Hibernate ORM 5.4.1.Final
* Upgrade to jdbi 3.6.0

dropwizard-bom/pom.xml

@@ -24,11 +24,11 @@
         <jackson.version>2.9.8</jackson.version>
         <jetty.version>9.4.14.v20181114</jetty.version>
         <servlet.version>3.0.0.v201112011016</servlet.version>
-        <metrics4.version>4.0.5</metrics4.version>
+        <metrics4.version>4.1.0-rc3</metrics4.version>
         <slf4j.version>1.7.25</slf4j.version>
         <logback.version>1.2.3</logback.version>
         <h2.version>1.4.197</h2.version>
-        <jdbi3.version>3.5.1</jdbi3.version>
+        <jdbi3.version>3.6.0</jdbi3.version>
     </properties>
 
     <dependencyManagement>
@@ -120,7 +120,7 @@
             <dependency>
                 <groupId>org.apache.tomcat</groupId>
                 <artifactId>tomcat-jdbc</artifactId>
-                <version>9.0.13</version>
+                <version>9.0.14</version>
             </dependency>
             <dependency>
                 <groupId>com.h2database</groupId>
@@ -149,7 +149,7 @@
             <dependency>
                 <groupId>org.hibernate</groupId>
                 <artifactId>hibernate-core</artifactId>
-                <version>5.3.7.Final</version>
+                <version>5.4.1.Final</version>
                 <exclusions>
                     <exclusion>
                         <groupId>org.jboss.logging</groupId>
@@ -170,7 +170,7 @@
             <dependency>
                 <groupId>net.bytebuddy</groupId>
                 <artifactId>byte-buddy</artifactId>
-                <version>1.9.4</version>
+                <version>1.9.7</version>
             </dependency>
             <dependency>
                 <groupId>org.hsqldb</groupId>

pom.xml

@@ -66,9 +66,9 @@
         <argLine>-Duser.language=en -Duser.region=US</argLine>
 
         <junit.version>4.12</junit.version>
-        <junit5.version>5.3.1</junit5.version>
+        <junit5.version>5.3.2</junit5.version>
         <assertj.version>3.11.1</assertj.version>
-        <mockito.version>2.23.0</mockito.version>
+        <mockito.version>2.23.4</mockito.version>
     </properties>
 
     <developers>
@@ -353,7 +353,7 @@
                                 <path>
                                     <groupId>com.uber.nullaway</groupId>
                                     <artifactId>nullaway</artifactId>
-                                    <version>0.6.3</version>
+                                    <version>0.6.4</version>
                                 </path>
                             </annotationProcessorPaths>
                             <compilerArgs>
@@ -536,7 +536,7 @@
                 <plugin>
                     <groupId>org.owasp</groupId>
                     <artifactId>dependency-check-maven</artifactId>
-                    <version>3.3.4</version>
+                    <version>4.0.2</version>
                 </plugin>
                 <plugin>
                     <groupId>org.eluder.coveralls</groupId>
@@ -551,7 +551,7 @@
                 <plugin>
                     <groupId>kr.motd.maven</groupId>
                     <artifactId>sphinx-maven-plugin</artifactId>
-                    <version>2.2.3</version>
+                    <version>2.3.1</version>
                 </plugin>
             </plugins>
         </pluginManagement>

suppressed-cves.xml

@@ -28,4 +28,8 @@
         <notes><![CDATA[false positive]]></notes>
         <cve>CVE-2018-1279</cve>
     </suppress>
+    <suppress>
+        <notes><![CDATA[false positive]]></notes>
+        <cve>CVE-2002-1533</cve>
+    </suppress>
 </suppressions>