chore(deps): update maven minor and patch

[Ksiona]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
ch.qos.logback:logback-classic	1.5.34 → 1.5.38
ch.qos.logback:logback-core	1.5.34 → 1.5.38
com.arangodb:arangodb-spring-data	5.0.0 → 5.1.0
com.fasterxml.jackson:jackson-bom	2.21.4 → 2.21.5
com.google.protobuf:protobuf-java	4.34.2 → 4.35.1
com.google.protobuf:protobuf-java-util	4.34.2 → 4.35.1
io.github.classgraph:classgraph	4.8.196 → 4.8.197
io.grpc:grpc-bom	1.81.0 → 1.83.1
io.grpc:grpc-netty-shaded	1.81.0 → 1.83.1
io.grpc:grpc-protobuf	1.81.0 → 1.83.1
io.grpc:grpc-stub	1.81.0 → 1.83.1
io.micrometer:micrometer-bom	1.17.0 → 1.17.1
io.micrometer:micrometer-core	1.17.0 → 1.17.1
io.micrometer:micrometer-registry-prometheus	1.17.0 → 1.17.1
net.bytebuddy:byte-buddy	1.18.10 → 1.18.11
net.bytebuddy:byte-buddy-agent	1.18.10 → 1.18.11
org.apache.httpcomponents.client5:httpclient5	5.6.3 → 5.6.4
org.apache.maven.plugins:maven-deploy-plugin	3.1.4 → 3.2.0
org.apache.qpid:qpid-broker-core	10.1.0 → 10.1.1
org.apache.qpid:qpid-broker-plugins-amqp-0-8-protocol	10.1.0 → 10.1.1
org.apache.qpid:qpid-broker-plugins-memory-store	10.1.0 → 10.1.1
org.hibernate.validator:hibernate-validator	9.1.0.Final → 9.1.3.Final
org.mongodb:mongodb-driver-bom	5.8.0 → 5.8.1
org.springframework.boot:spring-boot-dependencies	4.1.0 → 4.1.1
org.springframework.boot:spring-boot-starter-parent	4.1.0 → 4.1.1
org.springframework.cloud:spring-cloud-dependencies	2025.1.2 → 2025.1.3

---

Why this PR is manual

Mend Renovate runs for this repository abort with external-host-error: Maven Central answers 429 Too Many Requests to the shared Mend egress (Maven Central rate limiting detected despite Redis caching), so the maven group was not refreshed. The updates above were calculated by hand against renovate-core-config.json from qubership-core-infra (pins for Spring Boot 4.1.1 / Quarkus 3.33.3.3). Only minor and patch versions allowed by the pins are included.

Notes

• core-internal-bom: pin notes refreshed to Spring Boot 4.1.1. Added notes for logback.version, micrometer-bom.version, hibernate-validator.version and apache.httpclient5.version, where the Spring Boot version is ahead of Quarkus. postgresql.version is now the same on both platforms (42.7.13).
• dbaas-client-parent (io.grpc.version) and cloud-core-java-bom (io.micrometer.verion) got the same kind of note.

Not included

• maven-surefire-plugin 3.5.6 → 3.6.0: has no pin, but tests fail on 3.6.0 (single JUnit Platform provider), handled separately.
• Security updates that override pins: com.rabbitmq:amqp-client 5.34.0 → 5.37.0, at.yawk.lz4:lz4-java 1.11.1 → 1.11.4.
• Major updates: hamcrest 3.0, mockserver 8.0.0, cassandra-unit-spring 5.4.0, weld-junit 6.0.0.Final.
• io.opentelemetry.instrumentation:opentelemetry-instrumentation-bom stays on 2.28.x (pinned to the OpenTelemetry SDK managed by Spring Boot 4.1.x).
• Inter-module com.netcracker.* dependencies (GitHub Packages, managed by the release process).

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud