[Ujjwal-Aggarwal-336]

AKHQ dependency security updates

Updated the vulnerable dependencies identified in the image scan:

Dependency	Previous → Updated
Jackson core, databind, YAML and Scala modules	2.19.4 → 2.21.7
Jackson annotations	2.19.4 → 2.21 (the version published for the 2.21.x line)
Netty modules	4.2.13.Final → aligned on 4.2.18.Final via BOM
Apache HttpClient 5	5.5 → 5.6.4
Apache HttpCore 5	httpcore5-h2 5.3.5 → 5.4.3; related modules aligned
Logback core and classic	1.5.25 → 1.6.3, including test dependencies
Jetty modules	Mixed 12.0.33 / 12.1.2 → aligned on 12.0.38 via BOM
LZ4 (at.yawk.lz4)	1.10.1 → 1.11.1
Vert.x core	4.5.27 → 4.5.30
Plexus Utils	3.5.1 → 3.6.1
JLine affected modules	3.30.6 → 3.30.15
Log4j API and Core	2.25.4 → 2.25.5, including test-runtime dependencies

Also excluded the unpublished transitive Confluent events-schema dependency that blocked the build. Changed make build to copy the current Gradle shadowJar output, rather than matching stale JARs with a wildcard.

Validation: Builds and image rescans were run after the staged upgrades. The user’s final scan reports no remaining findings.

ISS-360001, ISS-360002, ISS-360003, ISS-360004, ISS-360005, ISS-360006, ISS-360007, ISS-360008, ISS-360009, ISS-360010, ISS-360011, ISS-360012, ISS-360013, ISS-360014, ISS-360015, ISS-360016, ISS-360017, ISS-360018, ISS-360019, ISS-360020, ISS-360022, ISS-360023, ISS-360024, ISS-360025, ISS-360026, ISS-360027, ISS-360028, ISS-360029, ISS-360030, ISS-363844, ISS-363845, ISS-366608, ISS-366609, ISS-367650, ISS-368358

[burnerlee]

please test the built image since there could be compatibility issues due to the pinned version of org.jline