Dependency updates (#299)

Signed-off-by: Mark S. Lewis <[email protected]>

Update dependencies to address CVE-2023-3635 (#292)

This vulnerability exists in a transitive dependency used by OpenTelemetry. However, OpenTelemetry are of the opinion that they did not make use of the vulnerable capability.

Signed-off-by: Mark S. Lewis <[email protected]>

Update dependencies to address CVE-2023-42503 (#290)

Bumps org.apache.commons:commons-compress from 1.23.0 to 1.24.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-compress
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Update dependencies to address CVE-2023-2976 (#286)

Also ensure checkstyle checks run correctly. Current versions require Java 11 or later.

Signed-off-by: Mark S. Lewis <[email protected]>

Update dependencies to address CVE-2022-45688, CVE-2022-1471 (#283)

Signed-off-by: Mark S. Lewis <[email protected]>

Minor fixes in SDGroup code. (#270)

(cherry picked from commit b026525)

Signed-off-by: Ryan Griffiths <[email protected]>

Update dependencies

Signed-off-by: Mark S. Lewis <[email protected]>
(cherry picked from commit c203167)

Release v2.2.19

Signed-off-by: Mark S. Lewis <[email protected]>

Release v2.2.18 (#239)

Signed-off-by: Mark S. Lewis <[email protected]>

Release v2.2.17 (#235)

Signed-off-by: Mark S. Lewis <[email protected]>