@ (#4)

chore: update vulnerable dependencies and add Maven CI

Bump jackson-databind 2.15.2 -> 2.22.1, logback-classic 1.4.8 -> 1.5.38,
slf4j-api 2.0.7 -> 2.0.17, and netty-all 4.1.94 -> 4.1.136 to clear all
open Dependabot security advisories.

Add a GitHub Actions workflow building on JDK 11, and a .gitignore for
Maven/IDE artifacts.
@

.github/workflows/ci.yml

@@ -0,0 +1,24 @@
+name: CI
+
+on:
+  push:
+    branches: [main]
+  pull_request:
+    branches: [main]
+  workflow_dispatch:
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+    steps:
+      - uses: actions/checkout@v4
+
+      - name: Set up JDK 11
+        uses: actions/setup-java@v4
+        with:
+          java-version: '11'
+          distribution: temurin
+          cache: maven
+
+      - name: Build
+        run: mvn -B --no-transfer-progress clean verify

.gitignore

@@ -0,0 +1,11 @@
+target/
+*.class
+*.log
+
+# IDE
+.idea/
+*.iml
+.vscode/
+.settings/
+.classpath
+.project

pom.xml

@@ -11,7 +11,7 @@
     <properties>
         <maven.compiler.source>11</maven.compiler.source>
         <maven.compiler.target>11</maven.compiler.target>
-        <netty.version>4.1.94.Final</netty.version>
+        <netty.version>4.1.136.Final</netty.version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     </properties>
 
@@ -24,17 +24,17 @@
         <dependency>
             <groupId>org.slf4j</groupId>
             <artifactId>slf4j-api</artifactId>
-            <version>2.0.7</version>
+            <version>2.0.17</version>
         </dependency>
         <dependency>
             <groupId>ch.qos.logback</groupId>
             <artifactId>logback-classic</artifactId>
-            <version>1.4.8</version>
+            <version>1.5.38</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.15.2</version>
+            <version>2.22.1</version>
         </dependency>
     </dependencies>