Upgrade Karaf from 4.4.7 to 4.4.8 (#4932)

* Upgrade Karaf from 4.4.7 to 4.4.8
* Upgrade Xtext/Xtend from 2.37.0 to 2.39.0
* Sync runtime dependencies with Karaf 4.4.7, most notably:
  * PaxWeb 8.0.33
  * commons-fileupload 1.6.0
  * commons-io 2.20.0
  * commons-lang3 3.18.0
  * JNA 5.17.0
  * XBean 4.27
  * Guava 33.4.8
  * ASM 9.8
  * PaxLogging 2.3.0
  * Bouncy Castle 1.81
  * lsp4j 0.24.0
  * emf.common 2.30.0
  * emf.ecore 2.36
  * emf.ecore.change 2.16.0
  * emf.ecore.xmi 2.37.0
  * guava.failureaccess 1.0.3
  * jose4j 0.9.6
  * logback 1.5.18
* Resolve itest runbundles
* Modularize imports

Signed-off-by: Holger Friedrich <mail@holger-friedrich.de>

bom/compile/pom.xml

@@ -19,15 +19,35 @@
   <properties>
     <californium.version>4.0.0-M2</californium.version>
     <jetty.version>9.4.57.v20241219</jetty.version>
-    <pax.web.version>8.0.30</pax.web.version>
+    <pax.web.version>8.0.33</pax.web.version>
     <swagger.version>2.2.28</swagger.version>
   </properties>
 
   <dependencies>
     <dependency>
       <groupId>org.osgi</groupId>
-      <artifactId>osgi.core</artifactId>
-      <version>8.0.0</version>
+      <artifactId>org.osgi.framework</artifactId>
+      <version>1.10.0</version>
+    </dependency>
+    <dependency>
+      <groupId>org.osgi</groupId>
+      <artifactId>org.osgi.util.tracker</artifactId>
+      <version>1.5.4</version>
+    </dependency>
+    <dependency>
+      <groupId>org.osgi</groupId>
+      <artifactId>org.osgi.service.packageadmin</artifactId>
+      <version>1.2.1</version>
+    </dependency>
+    <dependency>
+      <groupId>org.osgi</groupId>
+      <artifactId>org.osgi.dto</artifactId>
+      <version>1.1.1</version>
+    </dependency>
+    <dependency>
+      <groupId>org.osgi</groupId>
+      <artifactId>org.osgi.service.log</artifactId>
+      <version>1.5.0</version>
     </dependency>
     <dependency>
       <groupId>org.osgi</groupId>
@@ -83,7 +103,7 @@
     <dependency>
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-lang3</artifactId>
-      <version>3.17.0</version>
+      <version>3.18.0</version>
       <scope>compile</scope>
     </dependency>
 
@@ -413,13 +433,13 @@
     <dependency>
       <groupId>net.java.dev.jna</groupId>
       <artifactId>jna</artifactId>
-      <version>5.16.0</version>
+      <version>5.17.0</version>
       <scope>compile</scope>
     </dependency>
     <dependency>
       <groupId>net.java.dev.jna</groupId>
       <artifactId>jna-platform</artifactId>
-      <version>5.16.0</version>
+      <version>5.17.0</version>
       <scope>compile</scope>
     </dependency>
     <!-- transitive dependency of junit, required by javadoc in compile bom! -->

bom/runtime/pom.xml

@@ -21,8 +21,8 @@
     <cxf.version>3.6.5</cxf.version>
     <jackson.version>2.19.2</jackson.version>
     <jetty.version>9.4.57.v20241219</jetty.version>
-    <pax.logging.version>2.2.8</pax.logging.version>
-    <pax.web.version>8.0.30</pax.web.version>
+    <pax.logging.version>2.3.0</pax.logging.version>
+    <pax.web.version>8.0.33</pax.web.version>
     <swagger.version>2.2.28</swagger.version>
   </properties>
 
@@ -405,18 +405,18 @@
     <dependency>
       <groupId>commons-fileupload</groupId>
       <artifactId>commons-fileupload</artifactId>
-      <version>1.5</version>
+      <version>1.6.0</version>
       <scope>compile</scope>
     </dependency>
     <dependency>
       <groupId>commons-io</groupId>
       <artifactId>commons-io</artifactId>
-      <version>2.18.0</version>
+      <version>2.20.0</version>
     </dependency>
     <dependency>
       <groupId>org.apache.commons</groupId>
       <artifactId>commons-lang3</artifactId>
-      <version>3.17.0</version>
+      <version>3.18.0</version>
       <scope>compile</scope>
     </dependency>
     <dependency>
@@ -455,7 +455,7 @@
     <dependency>
       <groupId>org.bouncycastle</groupId>
       <artifactId>bcprov-jdk18on</artifactId>
-      <version>1.78.1</version>
+      <version>1.81</version>
     </dependency>
 
     <!-- Gson -->
@@ -785,13 +785,13 @@
     <dependency>
       <groupId>org.apache.xbean</groupId>
       <artifactId>xbean-bundleutils</artifactId>
-      <version>4.26</version>
+      <version>4.27</version>
       <scope>compile</scope>
     </dependency>
     <dependency>
       <groupId>org.apache.xbean</groupId>
       <artifactId>xbean-finder</artifactId>
-      <version>4.26</version>
+      <version>4.27</version>
       <scope>compile</scope>
     </dependency>
 
@@ -799,7 +799,7 @@
     <dependency>
       <groupId>com.google.guava</groupId>
       <artifactId>guava</artifactId>
-      <version>33.3.1-jre</version>
+      <version>33.4.8-jre</version>
       <scope>compile</scope>
     </dependency>
 
@@ -911,7 +911,7 @@
     <dependency>
       <groupId>org.ow2.asm</groupId>
       <artifactId>asm</artifactId>
-      <version>9.7.1</version>
+      <version>9.8</version>
       <scope>compile</scope>
     </dependency>
     <dependency>
@@ -1080,13 +1080,13 @@
     <dependency>
       <groupId>net.java.dev.jna</groupId>
       <artifactId>jna</artifactId>
-      <version>5.16.0</version>
+      <version>5.17.0</version>
       <scope>compile</scope>
     </dependency>
     <dependency>
       <groupId>net.java.dev.jna</groupId>
       <artifactId>jna-platform</artifactId>
-      <version>5.16.0</version>
+      <version>5.17.0</version>
       <scope>compile</scope>
     </dependency>
   </dependencies>

bom/test/pom.xml

@@ -55,7 +55,7 @@
     <dependency>
       <groupId>ch.qos.logback</groupId>
       <artifactId>logback-classic</artifactId>
-      <version>1.3.14</version>
+      <version>1.5.18</version>
     </dependency>
     <dependency>
       <groupId>com.jayway.jsonpath</groupId>