Third-party Dependency Upgrades for APIM 4.4.0

[YasasRangika]

Description

This issue is created to track the third-party dependency upgrades for the APIM 4.4.0 release. Each upgraded dependency will be mentioned in the comments.

Affected Component

APIM

Version

4.4.0

Related Issues

No response

Suggested Labels

No response

[YasasRangika]

[STATUS UPDATE]

Provided a docker image of the APIM-4.4.0-m2 pack to the security team for the JFrog Analysis report.

[npamudika]

Refer #3014

[YasasRangika]

[STATUS UPDATE]

Upgrade CXF version from 3.6.3 to 3.6.4:

wso2/carbon-apimgt#12556
wso2/product-apim#13530
wso2/carbon-deployment#401

[YasasRangika]

[STATUS UPDATE]

Upgrade bcprov-jdk18on and bcpkix-jdk18on Bouncy Castle dependencies from 1.77.0.wso2v1 to 1.78.1.wso2v1. Also, upgrade the bc-fips version from 1.0.2.4 to 1.0.2.5.

carbon-multitenancy PR: wso2/carbon-multitenancy#270
wso2-synapse PR: wso2/wso2-synapse#2217
carbon-apimgt PR: wso2/carbon-apimgt#12567
carbon-kernel PR: wso2/carbon-kernel#4074
product-apim PR: wso2/product-apim#13532

[YasasRangika]

[STATUS UPDATE]

Upgraded the Tomcat versions from 9.0.85.wso2v1 to 9.0.94.wso2v1 and tested the portals with the major REST APIs.

Orbit PR: wso2/orbit#1132
carbon-kernel PR: wso2/carbon-kernel#4075