Upgrade to the latest Debezium

* Manage some vulnerable transitive dependencies for the `spring-debezium-supplier`

dependencies.gradle

@@ -3,7 +3,7 @@ ext {
     springCloudVersion = '2023.0.1'
     springCloudAwsVersion = '3.0.4'
 
-    debeziumVersion = '2.5.4.Final'
+    debeziumVersion = '2.6.0.Final'
     djlVersion = '0.26.0'
     djlSpringVersion = '0.26'
 

supplier/spring-debezium-supplier/build.gradle

@@ -4,6 +4,12 @@ repositories {
 
 dependencies {
     api project(':spring-debezium-autoconfigure')
+
+    // TODO until Debezium upgrades them to non-vulnerable versions
+    api 'org.apache.commons:commons-compress:1.26.1'
+    api 'org.apache.avro:avro:1.11.3'
+    api 'org.json:json:20240303'
+
     api 'org.springframework.integration:spring-integration-debezium'
     api 'io.debezium:debezium-connector-mysql'
     api 'io.debezium:debezium-connector-mongodb'
@@ -13,7 +19,6 @@ dependencies {
     api 'io.debezium:debezium-connector-db2'
     api 'io.debezium:debezium-connector-vitess'
     api 'io.debezium:debezium-connector-spanner'
-    api 'io.debezium:debezium-connector-spanner'
 
     testImplementation 'com.zaxxer:HikariCP'
     testImplementation 'org.springframework:spring-jdbc'