Outdated and vulnerable dependencies found

Dependency scans identified the following outdated and vulnerable dependencies. It is highly important to upgrade to latest version:

• org.glassfish.hk2.hk2-utils version 2.6.1 (must be at least 3.x.x)
• org.glassfish.hk2.osgi-resource-locator version 1.0.3 (must be at least 3.0.0)

These dependencies belong to HTTP Jersey client:

[INFO] +- com.oracle.oci.sdk:oci-java-sdk-common-httpclient-jersey:jar:3.57.0:compile
[INFO] |  +- com.fasterxml.jackson.core:jackson-core:jar:2.17.1:compile
[INFO] |  |  \- ch.randelshofer:fastdoubleparser:jar:1.0.0:compile
[INFO] |  +- org.glassfish.jersey.media:jersey-media-json-jackson:jar:2.35:compile
[INFO] |  |  +- org.glassfish.jersey.ext:jersey-entity-filtering:jar:2.35:compile
[INFO] |  |  \- com.fasterxml.jackson.module:jackson-module-jaxb-annotations:jar:2.12.2:compile
[INFO] |  |     +- jakarta.xml.bind:jakarta.xml.bind-api:jar:2.3.2:compile
[INFO] |  |     \- jakarta.activation:jakarta.activation-api:jar:1.2.1:compile
[INFO] |  +- org.glassfish.jersey.inject:jersey-hk2:jar:2.35:compile
[INFO] |  |  +- org.glassfish.hk2:hk2-locator:jar:2.6.1:compile
[INFO] |  |  |  +- org.glassfish.hk2.external:aopalliance-repackaged:jar:2.6.1:compile
[INFO] |  |  |  +- org.glassfish.hk2:hk2-api:jar:2.6.1:compile
[INFO] |  |  |  \- org.glassfish.hk2:hk2-utils:jar:2.6.1:compile
[INFO] |  |  \- org.javassist:javassist:jar:3.25.0-GA:compile
[INFO] |  +- javax.annotation:javax.annotation-api:jar:1.3.2:compile
[INFO] |  \- com.fasterxml.jackson.datatype:jackson-datatype-jsr310:jar:2.17.1:compile

Start from the dependency configuration that brings in com.oracle.oci.sdk:oci-java-sdk-common-httpclient-jersey and inspect its Jersey and HK2 dependency tree. Re-run the dependency scan after updating the relevant versions; done means hk2-utils is at least 3.x.x and hk2.osgi-resource-locator is at least 3.0.0 without breaking the HTTP Jersey client.