Replace Jakarta with Eclipse Parsson

CHANGELOG.md

@@ -1,3 +1,6 @@
+## 4.0.1 (July 14, 2023) 
+  * Replaced jakarta.json with org.eclipse.parsson
+
 ## 4.0.0 (February 14 ♥, 2022) 
   * [Migrate from javax.json to jakarta.json](https://github.com/elasticio/elasticio/issues/6744)
     * Backward incompatible changes. Replaced `javax.json` with `org.glassfish:jakarta.json:2.0.1`

build.gradle

@@ -17,15 +17,15 @@ plugins {
     id 'org.owasp.dependencycheck' version '8.0.2'
 }
 group = 'io.elastic'
-version = '4.0.0'
+version = '4.0.1'
 sourceCompatibility = '1.8'
 
 dependencyCheck {
     format = 'ALL'
-    // Dependency Check script will fail in case there are critical (9.0-10.0) vulnerabilities.
-    // It should be configured to 7 (high and critical), but so far is not possible as 'axis' library
-    // and log4j issues which does not have any updates that solve the problem
-    failBuildOnCVSS = 7
+    // Dependency Check script will fail in case there are 8.0+ vulnerabilities.
+    // It should be configured to 7 (high and critical), but so far is not possible as 'jakarta.json-api' library
+    // does not have any updates that solve the problem
+    failBuildOnCVSS = 8
     suppressionFile = './dependencycheck-base-suppression.xml'
 }
 check.dependsOn dependencyCheckAnalyze
@@ -53,7 +53,7 @@ dependencies {
     testImplementation 'org.eclipse.jetty:jetty-server:9.4.1.v20170120'
     testImplementation 'com.github.tomakehurst:wiremock-jre8-standalone:2.33.2'
 
-    api 'org.glassfish:jakarta.json:2.0.1'
+    api 'org.eclipse.parsson:parsson:1.1.2'
     api 'com.rabbitmq:amqp-client:5.9.0'
     api 'commons-codec:commons-codec:1.15'
     api 'commons-io:commons-io:2.11.0'