Bump the all-dependencies group across 1 directory with 11 updates (#141)

* Bump the all-dependencies group across 1 directory with 11 updates

Bumps the all-dependencies group with 11 updates in the / directory:

| Package | From | To |
| --- | --- | --- |
| [no.nav.security:token-validation-spring](https://github.com/navikt/token-support) | `4.1.8` | `5.0.5` |
| [no.nav.security:token-validation-spring-test](https://github.com/navikt/token-support) | `4.1.8` | `5.0.5` |
| [no.nav.familie.kontrakter:enslig-forsorger](https://github.com/navikt/familie-kontrakter) | `3.0_20240903082713_4cc7504` | `3.0_20241030123037_58542dd` |
| [no.nav.familie.kontrakter:felles](https://github.com/navikt/familie-kontrakter) | `3.0_20240903082713_4cc7504` | `3.0_20241030123037_58542dd` |
| [org.testcontainers:oracle-xe](https://github.com/testcontainers/testcontainers-java) | `1.20.1` | `1.20.3` |
| [io.mockk:mockk-jvm](https://github.com/mockk/mockk) | `1.13.12` | `1.13.13` |
| [org.springframework.boot](https://github.com/spring-projects/spring-boot) | `3.3.3` | `3.3.5` |
| [jvm](https://github.com/JetBrains/kotlin) | `2.0.20` | `2.0.21` |
| [plugin.spring](https://github.com/JetBrains/kotlin) | `2.0.20` | `2.0.21` |
| [plugin.jpa](https://github.com/JetBrains/kotlin) | `2.0.20` | `2.0.21` |
| org.cyclonedx.bom | `1.7.4` | `1.10.0` |



Updates `no.nav.security:token-validation-spring` from 4.1.8 to 5.0.5
- [Release notes](https://github.com/navikt/token-support/releases)
- [Commits](navikt/token-support@4.1.8...5.0.5)

Updates `no.nav.security:token-validation-spring-test` from 4.1.8 to 5.0.5
- [Release notes](https://github.com/navikt/token-support/releases)
- [Commits](navikt/token-support@4.1.8...5.0.5)

Updates `no.nav.familie.kontrakter:enslig-forsorger` from 3.0_20240903082713_4cc7504 to 3.0_20241030123037_58542dd
- [Commits](https://github.com/navikt/familie-kontrakter/commits)

Updates `no.nav.familie.kontrakter:felles` from 3.0_20240903082713_4cc7504 to 3.0_20241030123037_58542dd
- [Commits](https://github.com/navikt/familie-kontrakter/commits)

Updates `no.nav.familie.kontrakter:felles` from 3.0_20240903082713_4cc7504 to 3.0_20241030123037_58542dd
- [Commits](https://github.com/navikt/familie-kontrakter/commits)

Updates `no.nav.security:token-validation-spring-test` from 4.1.8 to 5.0.5
- [Release notes](https://github.com/navikt/token-support/releases)
- [Commits](navikt/token-support@4.1.8...5.0.5)

Updates `org.testcontainers:oracle-xe` from 1.20.1 to 1.20.3
- [Release notes](https://github.com/testcontainers/testcontainers-java/releases)
- [Changelog](https://github.com/testcontainers/testcontainers-java/blob/main/CHANGELOG.md)
- [Commits](testcontainers/testcontainers-java@1.20.1...1.20.3)

Updates `io.mockk:mockk-jvm` from 1.13.12 to 1.13.13
- [Release notes](https://github.com/mockk/mockk/releases)
- [Commits](mockk/mockk@1.13.12...1.13.13)

Updates `org.springframework.boot` from 3.3.3 to 3.3.5
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.3.3...v3.3.5)

Updates `jvm` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.0.20...v2.0.21)

Updates `plugin.spring` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.0.20...v2.0.21)

Updates `plugin.jpa` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.0.20...v2.0.21)

Updates `plugin.spring` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.0.20...v2.0.21)

Updates `plugin.jpa` from 2.0.20 to 2.0.21
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](JetBrains/kotlin@v2.0.20...v2.0.21)

Updates `org.cyclonedx.bom` from 1.7.4 to 1.10.0

---
updated-dependencies:
- dependency-name: no.nav.security:token-validation-spring
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: no.nav.security:token-validation-spring-test
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: no.nav.familie.kontrakter:enslig-forsorger
  dependency-type: direct:production
  dependency-group: all-dependencies
- dependency-name: no.nav.familie.kontrakter:felles
  dependency-type: direct:production
  dependency-group: all-dependencies
- dependency-name: no.nav.familie.kontrakter:felles
  dependency-type: direct:production
  dependency-group: all-dependencies
- dependency-name: no.nav.security:token-validation-spring-test
  dependency-type: direct:production
  update-type: version-update:semver-major
  dependency-group: all-dependencies
- dependency-name: org.testcontainers:oracle-xe
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: io.mockk:mockk-jvm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.springframework.boot
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: jvm
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: plugin.spring
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: plugin.jpa
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: plugin.spring
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: plugin.jpa
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: all-dependencies
- dependency-name: org.cyclonedx.bom
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: all-dependencies
...

Signed-off-by: dependabot[bot] <[email protected]>

* cyclonedx plugin fix

* oppdaterer GA for main

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: throndi <[email protected]>

Author: dependabot[bot]

.github/workflows/master.yml

@@ -25,13 +25,16 @@ jobs:
         run: |
           ./gradlew wrapper --gradle-version=8.5
           ./gradlew test build --no-daemon
+      - name: Generer SBOM
+        run: ./gradlew cyclonedxBom
       - uses: nais/docker-build-push@v0
         id: docker-push
         with:
           team: teamfamilie
           tag: latest
           identity_provider: ${{ secrets.NAIS_WORKLOAD_IDENTITY_PROVIDER }}
           project_id: ${{ vars.NAIS_MANAGEMENT_PROJECT_ID }}
+          byosbom: build/resources/main/META-INF/sbom/application.cdx.json
     outputs:
       image: ${{ steps.docker-push.outputs.image }}
   deploy:

build.gradle.kts

@@ -1,22 +1,22 @@
 import org.jetbrains.kotlin.gradle.tasks.KotlinCompile
 
-val mockkVersion = "1.13.12"
-val tokenSupportVersion = "4.1.8"
+val mockkVersion = "1.13.13"
+val tokenSupportVersion = "5.0.5"
 val springdocVersion = "1.8.0"
 val navFoedselsnummerVersion = "1.0-SNAPSHOT.6"
-val kontrakterVersion = "3.0_20240903082713_4cc7504"
+val kontrakterVersion = "3.0_20241030123037_58542dd"
 val mainClass = "no.nav.familie.ef.infotrygd.Main"
 val ktlint by configurations.creating
 
 plugins {
-    val kotlinVersion = "2.0.20"
-    val springBootVersion = "3.3.3"
+    val kotlinVersion = "2.0.21"
+    val springBootVersion = "3.3.5"
     id("org.springframework.boot") version springBootVersion
     id("io.spring.dependency-management") version "1.1.6"
     kotlin("jvm") version kotlinVersion
     kotlin("plugin.spring") version kotlinVersion
     kotlin("plugin.jpa") version kotlinVersion
-    id("org.cyclonedx.bom") version "1.7.4"
+    id("org.cyclonedx.bom") version "1.8.1"
 }
 
 group = "no.nav"
@@ -77,7 +77,7 @@ dependencies {
     annotationProcessor("org.springframework.boot:spring-boot-configuration-processor")
     testImplementation("org.springframework.boot:spring-boot-starter-test")
     testImplementation("com.github.doyaaaaaken:kotlin-csv-jvm:1.10.0")
-    testImplementation("org.testcontainers:oracle-xe:1.20.1")
+    testImplementation("org.testcontainers:oracle-xe:1.20.3")
     testImplementation("com.h2database:h2")
     testImplementation("org.flywaydb:flyway-core")
     testImplementation("io.mockk:mockk-jvm:$mockkVersion")
@@ -127,11 +127,5 @@ tasks.test {
     jvmArgs = listOf("-Dnet.bytebuddy.experimental=true")
 }
 
-tasks.register("generateSBOM") {
-    dependsOn("cyclonedxBom")
-    doLast {
-        println("SBOM generated at build/reports/bom.json")
-    }
-}
 
 // tasks.findByName('publish').mustRunAfter 'build'