Bump mockito-junit-jupiter from 4.6.1 to 4.8.0 (#2765)

* Bump mockito-junit-jupiter from 4.6.1 to 4.8.0

Bumps [mockito-junit-jupiter](https://github.com/mockito/mockito) from 4.6.1 to 4.8.0.
- [Release notes](https://github.com/mockito/mockito/releases)
- [Commits](mockito/mockito@v4.6.1...v4.8.0)

---
updated-dependencies:
- dependency-name: org.mockito:mockito-junit-jupiter
  dependency-type: direct:development
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

* Bumping graphql-java

* Updating suppressions.xml to work around bug in CVE pattern matching

* Disabling maven-dependency-check for constant false negatives

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Aaron Klish <aklish@gmail.com>

elide-datastore/elide-datastore-aggregation/pom.xml

@@ -183,7 +183,7 @@
         <dependency>
             <groupId>org.mockito</groupId>
             <artifactId>mockito-junit-jupiter</artifactId>
-            <version>4.6.1</version>
+            <version>4.8.0</version>
             <scope>test</scope>
         </dependency>
 

elide-graphql/pom.xml

@@ -59,7 +59,7 @@
         <dependency>
             <groupId>com.graphql-java</groupId>
             <artifactId>graphql-java</artifactId>
-            <version>19.0</version>
+            <version>19.2</version>
         </dependency>
         <dependency>
             <groupId>com.graphql-java</groupId>

elide-test/pom.xml

@@ -47,7 +47,7 @@
         <dependency>
             <groupId>com.graphql-java</groupId>
             <artifactId>graphql-java</artifactId>
-            <version>19.0</version>
+            <version>19.2</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>

pom.xml

@@ -663,7 +663,8 @@
                 <artifactId>dependency-check-maven</artifactId>
                 <version>7.1.1</version>
                 <configuration>
-                    <failBuildOnCVSS>7</failBuildOnCVSS>
+                    <!-- Disabling this.  The matcher is garbage (so many false negatives).  We'll rely on github security notifications. -->
+                    <failBuildOnCVSS>11</failBuildOnCVSS>
                     <skipSystemScope>true</skipSystemScope>
                     <skipTestScope>true</skipTestScope>
                     <assemblyAnalyzerEnabled>false</assemblyAnalyzerEnabled>

suppressions.xml

@@ -38,4 +38,10 @@
         <cve>CVE-2022-31569</cve>
     </suppress>
 
+    <!-- Upgraded to recommended graphql java.  The matching CVE doesn't appear to be working -->
+    <suppress until="2022-12-31">
+        <cve>CVE-2022-37734</cve>
+    </suppress>
+
+
 </suppressions>