fix ca.uhn.hapi.fhir:org.hl7.fhir.r4 and ca.uhn.hapi.fhir:org.hl7.fhi…

…r.utilities vuln (#8252)

backend/build.gradle

@@ -147,7 +147,7 @@ dependencies {
     // WireMock (only used for testing)
     testImplementation "com.github.tomakehurst:wiremock-jre8-standalone:2.35.0"
 
-    implementation 'ca.uhn.hapi.fhir:hapi-fhir-structures-r4:7.2.2'
+    implementation 'ca.uhn.hapi.fhir:hapi-fhir-structures-r4:7.4.4'
     implementation('com.fasterxml.jackson.core:jackson-core') {
         // workaround for a sibling dependency version bug in the v7 upgrade to the HAPI library
         // that was causing a serialization issue

backend/gradle.lockfile

@@ -1,11 +1,11 @@
 # This is a Gradle generated file for dependency locking.
 # Manual edits can break the build and are not advised.
 # This file is expected to be part of source control.
-ca.uhn.hapi.fhir:hapi-fhir-base:7.2.2=compileClasspath,runtimeClasspath
-ca.uhn.hapi.fhir:hapi-fhir-caching-api:7.2.2=compileClasspath,runtimeClasspath
-ca.uhn.hapi.fhir:hapi-fhir-structures-r4:7.2.2=compileClasspath,runtimeClasspath
-ca.uhn.hapi.fhir:org.hl7.fhir.r4:6.1.2.2=compileClasspath,runtimeClasspath
-ca.uhn.hapi.fhir:org.hl7.fhir.utilities:6.1.2.2=compileClasspath,runtimeClasspath
+ca.uhn.hapi.fhir:hapi-fhir-base:7.4.4=compileClasspath,runtimeClasspath
+ca.uhn.hapi.fhir:hapi-fhir-caching-api:7.4.4=compileClasspath,runtimeClasspath
+ca.uhn.hapi.fhir:hapi-fhir-structures-r4:7.4.4=compileClasspath,runtimeClasspath
+ca.uhn.hapi.fhir:org.hl7.fhir.r4:6.3.23=compileClasspath,runtimeClasspath
+ca.uhn.hapi.fhir:org.hl7.fhir.utilities:6.3.23=compileClasspath,runtimeClasspath
 ch.qos.logback:logback-classic:1.4.14=compileClasspath,runtimeClasspath
 ch.qos.logback:logback-core:1.4.14=compileClasspath,runtimeClasspath
 com.azure:azure-core-http-netty:1.13.7=compileClasspath,runtimeClasspath
@@ -32,11 +32,11 @@ com.github.jknack:handlebars-jackson2:4.3.1=compileClasspath,runtimeClasspath
 com.github.jknack:handlebars:4.3.1=compileClasspath,runtimeClasspath
 com.github.stephenc.jcip:jcip-annotations:1.0-1=compileClasspath,runtimeClasspath
 com.google.code.findbugs:jsr305:3.0.2=compileClasspath,runtimeClasspath
-com.google.errorprone:error_prone_annotations:2.18.0=compileClasspath,runtimeClasspath
-com.google.guava:failureaccess:1.0.1=compileClasspath,runtimeClasspath
-com.google.guava:guava-parent:32.1.1-jre=compileClasspath,runtimeClasspath
-com.google.guava:guava:32.1.1-jre=compileClasspath,runtimeClasspath
-com.google.j2objc:j2objc-annotations:2.8=compileClasspath
+com.google.errorprone:error_prone_annotations:2.26.1=compileClasspath,runtimeClasspath
+com.google.guava:failureaccess:1.0.2=compileClasspath,runtimeClasspath
+com.google.guava:guava:33.2.1-jre=compileClasspath,runtimeClasspath
+com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=compileClasspath,runtimeClasspath
+com.google.j2objc:j2objc-annotations:3.0.0=compileClasspath
 com.googlecode.libphonenumber:libphonenumber:8.13.28=compileClasspath,runtimeClasspath
 com.graphql-java:graphql-java-extended-scalars:22.0=compileClasspath,runtimeClasspath
 com.graphql-java:graphql-java-extended-validation:21.0=compileClasspath,runtimeClasspath
@@ -110,7 +110,7 @@ io.netty:netty-transport-native-epoll:4.1.104.Final=compileClasspath,runtimeClas
 io.netty:netty-transport-native-kqueue:4.1.104.Final=compileClasspath,runtimeClasspath
 io.netty:netty-transport-native-unix-common:4.1.104.Final=compileClasspath,runtimeClasspath
 io.netty:netty-transport:4.1.104.Final=compileClasspath,runtimeClasspath
-io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations:1.32.0=compileClasspath,runtimeClasspath
+io.opentelemetry.instrumentation:opentelemetry-instrumentation-annotations:2.4.0=compileClasspath,runtimeClasspath
 io.opentelemetry:opentelemetry-api:1.25.0=compileClasspath,runtimeClasspath
 io.opentelemetry:opentelemetry-context:1.25.0=compileClasspath,runtimeClasspath
 io.projectreactor.addons:reactor-extra:3.5.1=compileClasspath,runtimeClasspath
@@ -130,7 +130,7 @@ jakarta.xml.bind:jakarta.xml.bind-api:4.0.1=compileClasspath,runtimeClasspath
 javax.activation:javax.activation-api:1.2.0=compileClasspath,runtimeClasspath
 javax.annotation:javax.annotation-api:1.3.2=compileClasspath,runtimeClasspath
 javax.xml.bind:jaxb-api:2.3.1=compileClasspath,runtimeClasspath
-net.bytebuddy:byte-buddy:1.14.10=compileClasspath,runtimeClasspath
+net.bytebuddy:byte-buddy:1.14.10=runtimeClasspath
 net.javacrumbs.shedlock:shedlock-core:4.42.0=compileClasspath,runtimeClasspath
 net.javacrumbs.shedlock:shedlock-provider-jdbc-template:5.12.0=compileClasspath,runtimeClasspath
 net.javacrumbs.shedlock:shedlock-spring:5.12.0=compileClasspath,runtimeClasspath
@@ -152,16 +152,14 @@ org.apache.tomcat.embed:tomcat-embed-el:10.1.17=compileClasspath,runtimeClasspat
 org.apache.tomcat.embed:tomcat-embed-websocket:10.1.19=compileClasspath,runtimeClasspath
 org.apache.tomcat:tomcat-annotations-api:10.1.17=compileClasspath,runtimeClasspath
 org.aspectj:aspectjweaver:1.9.21=compileClasspath,runtimeClasspath
-org.assertj:assertj-core:3.24.2=compileClasspath,runtimeClasspath
 org.attoparser:attoparser:2.0.7.RELEASE=compileClasspath,runtimeClasspath
 org.bouncycastle:bcpkix-jdk18on:1.73=compileClasspath
 org.bouncycastle:bcpkix-jdk18on:1.75=runtimeClasspath
 org.bouncycastle:bcprov-jdk18on:1.73=compileClasspath
 org.bouncycastle:bcprov-jdk18on:1.75=runtimeClasspath
 org.bouncycastle:bcutil-jdk18on:1.73=compileClasspath
 org.bouncycastle:bcutil-jdk18on:1.75=runtimeClasspath
-org.checkerframework:checker-qual:3.33.0=compileClasspath
-org.checkerframework:checker-qual:3.42.0=runtimeClasspath
+org.checkerframework:checker-qual:3.42.0=compileClasspath,runtimeClasspath
 org.codehaus.woodstox:stax2-api:4.2.1=compileClasspath,runtimeClasspath
 org.eclipse.angus:angus-activation:2.0.1=runtimeClasspath
 org.eclipse.angus:jakarta.mail:1.1.0=compileClasspath,runtimeClasspath