GUACAMOLE-1956: Merge (re-)update to latest compatible dependencies.

extensions/guacamole-auth-duo/pom.xml

@@ -40,7 +40,7 @@
     <properties>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <okhttp.version>4.12.0</okhttp.version>
-        <kotlin.version>1.9.23</kotlin.version>
+        <kotlin.version>1.9.25</kotlin.version>
     </properties>
 
     <dependencies>
@@ -77,7 +77,7 @@
         <dependency>
             <groupId>com.duosecurity</groupId>
             <artifactId>duo-universal-sdk</artifactId>
-            <version>1.1.3</version>
+            <version>1.2.0</version>
             <exclusions>
                 <exclusion>
                     <groupId>com.squareup.okhttp3</groupId>
@@ -134,7 +134,6 @@
         <dependency>
             <groupId>com.github.seancfoley</groupId>
             <artifactId>ipaddress</artifactId>
-            <version>5.5.0</version>
             <scope>provided</scope>
         </dependency>
 

extensions/guacamole-auth-jdbc/modules/guacamole-auth-jdbc-base/pom.xml

@@ -57,7 +57,7 @@
         <dependency>
             <groupId>org.mybatis</groupId>
             <artifactId>mybatis</artifactId>
-            <version>3.5.16</version>
+            <version>3.5.17</version>
         </dependency>
         
         <!-- MyBatis Guice -->

extensions/guacamole-auth-json/pom.xml

@@ -77,7 +77,6 @@
         <dependency>
             <groupId>com.github.seancfoley</groupId>
             <artifactId>ipaddress</artifactId>
-            <version>5.5.0</version>
             <scope>provided</scope>
         </dependency>
 

extensions/guacamole-auth-ldap/pom.xml

@@ -87,7 +87,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-lang3</artifactId>
-            <version>3.16.0</version>
+            <version>3.17.0</version>
         </dependency>
 
     </dependencies>

extensions/guacamole-auth-restrict/pom.xml

@@ -170,7 +170,6 @@
         <dependency>
             <groupId>com.github.seancfoley</groupId>
             <artifactId>ipaddress</artifactId>
-            <version>5.5.0</version>
             <scope>provided</scope>
         </dependency>
 

extensions/guacamole-auth-sso/modules/guacamole-auth-sso-cas/pom.xml

@@ -77,9 +77,28 @@
                     <artifactId>commons-codec</artifactId>
                 </exclusion>
 
+                <!--
+                    Replace older BouncyCastle (1.70) with newer, compatible
+                    version (1.79), which has since been renamed from
+                    "bcpkix-jdk15on" to "bcpkix-jdk15to18".
+                -->
+                <exclusion>
+                    <groupId>org.bouncycastle</groupId>
+                    <artifactId>bcpkix-jdk15on</artifactId>
+                </exclusion>
+
             </exclusions>
         </dependency>
-        
+
+        <!-- BouncyCastle for Java 5 and above (formerly "bcpkix-jdk15on", a
+        transitive dependency of cas-client-core that we are overriding to
+        force an update) -->
+        <dependency>
+            <groupId>org.bouncycastle</groupId>
+            <artifactId>bcpkix-jdk15to18</artifactId>
+            <version>1.79</version>
+        </dependency>
+
         <!-- Guava - Utility Library -->
         <dependency>
             <groupId>com.google.guava</groupId>

extensions/guacamole-auth-sso/modules/guacamole-auth-sso-saml/pom.xml

@@ -96,7 +96,7 @@
 
                 <!--
                     Replace slightly older commons-lang3 (3.12.0) with latest
-                    compatible version (3.16.0) so that we don't need two copies
+                    compatible version (3.17.0) so that we don't need two copies
                     of the same license information.
                 -->
                 <exclusion>
@@ -122,14 +122,14 @@
         <dependency>
             <groupId>com.fasterxml.woodstox</groupId>
             <artifactId>woodstox-core</artifactId>
-            <version>6.6.0</version>
+            <version>5.4.0</version>
         </dependency>
 
         <!-- Apache XML Security for Java (see exclusions for java-saml) -->
         <dependency>
             <groupId>org.apache.santuario</groupId>
             <artifactId>xmlsec</artifactId>
-            <version>4.0.2</version>
+            <version>2.2.6</version>
             <exclusions>
 
                 <!--
@@ -150,7 +150,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-lang3</artifactId>
-            <version>3.16.0</version>
+            <version>3.17.0</version>
         </dependency>
 
         <!-- Apache Commons Codec (see exclusions for java-saml and xmlsec) -->

extensions/guacamole-auth-totp/pom.xml

@@ -182,7 +182,6 @@
         <dependency>
             <groupId>com.github.seancfoley</groupId>
             <artifactId>ipaddress</artifactId>
-            <version>5.5.0</version>
             <scope>provided</scope>
         </dependency>
 

extensions/guacamole-vault/modules/guacamole-vault-ksm/pom.xml

@@ -38,7 +38,7 @@
     </parent>
 
     <properties>
-        <kotlin.version>1.9.23</kotlin.version>
+        <kotlin.version>1.9.25</kotlin.version>
     </properties>
 
     <dependencies>
@@ -60,7 +60,7 @@
         <dependency>
             <groupId>com.keepersecurity.secrets-manager</groupId>
             <artifactId>core</artifactId>
-            <version>16.6.5</version>
+            <version>16.6.6</version>
 
             <!-- Correct version conflict (different versions across transitive
                 dependencies) -->