[Snyk] Fix for 5 vulnerabilities

[philvarner-snyk]

Snyk has created this PR to fix 5 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Arbitrary Code Injection SNYK-JAVA-ORGHIBERNATE-15702517	117	com.github.derjust:spring-data-dynamodb: 4.3.1 -> 5.0.3 Major version upgrade No Path Found No Known Exploit
	Directory Traversal SNYK-JAVA-ORGSPRINGFRAMEWORK-15701845	112	org.springframework.data:spring-data-rest-webmvc: 2.6.6.RELEASE -> 4.5.10 Major version upgrade No Path Found No Known Exploit
	Cross-site Scripting (XSS) SNYK-JAVA-ORGHIBERNATE-15702518	75	com.github.derjust:spring-data-dynamodb: 4.3.1 -> 5.0.3 Major version upgrade No Path Found No Known Exploit
	Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') SNYK-JAVA-ORGSPRINGFRAMEWORK-15701755	30	org.springframework.cloud:spring-cloud-function-adapter-aws: 1.0.0.RC2 -> 3.2.0 org.springframework.data:spring-data-rest-webmvc: 2.6.6.RELEASE -> 4.5.10 Major version upgrade No Path Found No Known Exploit
	Improper Neutralization of Special Elements in Output Used by a Downstream Component ('Injection') SNYK-JAVA-ORGSPRINGFRAMEWORK-15701756	30	org.springframework.data:spring-data-rest-webmvc: 2.6.6.RELEASE -> 4.5.10 Major version upgrade No Path Found No Known Exploit

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Arbitrary Code Injection
🦉 Cross-site Scripting (XSS)
🦉 Directory Traversal

[philvarner-snyk]

This upgrade involves multiple major version jumps for critical Spring and AWS libraries, introducing significant breaking changes. All three upgrades are high-risk and will require substantial code and configuration updates, along with a migration to newer versions of Spring Boot, Spring Framework, and the AWS SDK.

1. com.github.derjust:spring-data-dynamodb (4.3.1 → 5.0.3)

Risk: HIGH

This is a major version upgrade that ties the library to a newer version of the Spring Framework. The derjust fork of this library is also significantly outdated, with its last release in late 2018.

Breaking Changes:

• Spring Framework 5.x/Spring Boot 2.x Compatibility: Version 5.x of this library requires an upgrade to Spring Framework 5.x and Spring Boot 2.x. This is a major environmental change that brings its own set of breaking changes and migration requirements.
• Outdated Library: This specific library (com.github.derjust) has not been updated since 2018 and still relies on the AWS SDK v1. A more actively maintained fork is now the official community module, which is being updated to support AWS SDK v2 and newer Spring Boot versions.

Recommendation: This upgrade is a major undertaking. Before proceeding, evaluate migrating to the actively maintained fork of spring-data-dynamodb to ensure future compatibility and support for modern AWS and Spring features.

2. org.springframework.cloud:spring-cloud-function-adapter-aws (1.0.0.RC2 → 3.2.0)

Risk: HIGH

This is a massive upgrade from a release candidate to a stable version 3.x, which represents a complete rewrite of the library.

Breaking Changes:

• Complete Rewrite & AWS SDK v2: The library was rewritten from the ground up to use the AWS SDK for Java v2, deprecating

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[philvarner-snyk]

⛔ Snyk checks have failed. 4 issues have been found so far.

Status	Scan Engine	Critical	High	Medium	Low	Total (4)
⛔	Open Source Security	0	0	4	0	4 issues
✅	Licenses	0	0	0	0	0 issues
✅	Code Security	0	0	0	0	0 issues

💻 Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.