build(deps): patch consumer-neutral dependencies

Author: jbeckwith-oai

buildSrc/src/main/kotlin/openai.wiremock-test.gradle.kts

@@ -37,7 +37,7 @@ dependencies {
         }
     }
 
-    testImplementation(platform("org.eclipse.jetty:jetty-bom:12.0.33"))
-    testImplementation(platform("org.eclipse.jetty.ee10:jetty-ee10-bom:12.0.33"))
+    testImplementation(platform("org.eclipse.jetty:jetty-bom:12.0.36"))
+    testImplementation(platform("org.eclipse.jetty.ee10:jetty-ee10-bom:12.0.36"))
     testImplementation("org.wiremock:wiremock-jetty12:3.13.2")
 }

openai-java-bedrock/build.gradle.kts

@@ -36,6 +36,8 @@ dependencies {
     runtimeOnly("software.amazon.awssdk:url-connection-client")
 
     testImplementation(kotlin("test"))
+    // Keep WireMock's transitive Jackson runtime aligned on a secure release.
+    testImplementation(platform("com.fasterxml.jackson:jackson-bom:2.21.5"))
     testImplementation("org.assertj:assertj-core:3.27.7")
     testImplementation("org.junit.jupiter:junit-jupiter-api:5.9.3")
     testImplementation("org.junit-pioneer:junit-pioneer:1.9.1")

openai-java-example/build.gradle.kts

@@ -10,6 +10,8 @@ repositories {
 dependencies {
     implementation(project(":openai-java"))
     implementation(project(":openai-java-bedrock"))
+    // Keep Azure Identity's Netty runtime aligned on a secure release.
+    implementation(platform("io.netty:netty-bom:4.1.136.Final"))
     implementation("com.azure:azure-identity:1.18.4")
 }