Upgrade Karaf to 4.4.11 (#5510)

* Upgrade Karaf dependencies and libraries

Upgrade Karaf-related dependencies and several libraries.
This includes upgrades for the following libraries:

* jackson from 2.21.1 to 2.21.2
* pax-logging from 2.3.2 to 2.3.3
* org.eclipse.osgi from 3.18.0 to 3.24.0
* org.apache.felix.scr from 2.2.6 to 2.2.18
* org.ow2.asm from 9.9 to 9.9.1
* org.apache.groovy:groovy-all from 5.0.5 to 5.0.25
* org.eclipse.equinox.common from 3.19.0 to 3.20.300
* org.eclipse.equinox.registry from 3.12.0 to 3.12.600
* bndtools/biz.aQute.tester.junit-platform from 7.2.1 to 7.2.3
* org.ops4j.pax.logging.pax-logging-api from 2.3.2 to 2.3.3
* xtext/xtend requirements from 2.41.0 to 2.43.0.M1
* lsp4j from 0.24.0 to 1.0.0
* commons-io from 2.21.0 to 2.22.0

Signed-off-by: Holger Friedrich <mail@holger-friedrich.de>

bom/compile/pom.xml

@@ -19,7 +19,7 @@
   <properties>
     <californium.version>4.0.0-M2</californium.version>
     <jetty.version>9.4.58.v20250814</jetty.version>
-    <pax.web.version>8.0.34</pax.web.version>
+    <pax.web.version>8.0.35</pax.web.version>
     <swagger.version>2.2.43</swagger.version>
   </properties>
 

bom/runtime/pom.xml

@@ -20,10 +20,10 @@
     <!-- cxf can be updated independently of karaf, only used in karaf tests -->
     <cxf.version>3.6.10</cxf.version>
     <jackson.annotations.version>2.21</jackson.annotations.version>
-    <jackson.version>2.21.1</jackson.version>
+    <jackson.version>2.21.2</jackson.version>
     <jetty.version>9.4.58.v20250814</jetty.version>
-    <pax.logging.version>2.3.2</pax.logging.version>
-    <pax.web.version>8.0.34</pax.web.version>
+    <pax.logging.version>2.3.3</pax.logging.version>
+    <pax.web.version>8.0.35</pax.web.version>
     <swagger.version>2.2.43</swagger.version>
   </properties>
 
@@ -52,7 +52,7 @@
     <dependency>
       <groupId>org.eclipse.platform</groupId>
       <artifactId>org.eclipse.osgi</artifactId>
-      <version>3.18.0</version>
+      <version>3.24.0</version>
       <scope>compile</scope>
     </dependency>
 
@@ -72,7 +72,7 @@
     <dependency>
       <groupId>org.apache.felix</groupId>
       <artifactId>org.apache.felix.scr</artifactId>
-      <version>2.2.6</version>
+      <version>2.2.18</version>
       <scope>compile</scope>
       <exclusions>
         <exclusion>
@@ -412,7 +412,7 @@
     <dependency>
       <groupId>commons-io</groupId>
       <artifactId>commons-io</artifactId>
-      <version>2.21.0</version>
+      <version>2.22.0</version>
     </dependency>
     <dependency>
       <groupId>org.apache.commons</groupId>
@@ -800,7 +800,7 @@
     <dependency>
       <groupId>com.google.guava</groupId>
       <artifactId>guava</artifactId>
-      <version>33.5.0-jre</version>
+      <version>33.6.0-jre</version>
       <scope>compile</scope>
     </dependency>
 
@@ -912,7 +912,31 @@
     <dependency>
       <groupId>org.ow2.asm</groupId>
       <artifactId>asm</artifactId>
-      <version>9.9</version>
+      <version>${asm.version}</version>
+      <scope>compile</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.ow2.asm</groupId>
+      <artifactId>asm-analysis</artifactId>
+      <version>${asm.version}</version>
+      <scope>compile</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.ow2.asm</groupId>
+      <artifactId>asm-commons</artifactId>
+      <version>${asm.version}</version>
+      <scope>compile</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.ow2.asm</groupId>
+      <artifactId>asm-tree</artifactId>
+      <version>${asm.version}</version>
+      <scope>compile</scope>
+    </dependency>
+    <dependency>
+      <groupId>org.ow2.asm</groupId>
+      <artifactId>asm-util</artifactId>
+      <version>${asm.version}</version>
       <scope>compile</scope>
     </dependency>
     <dependency>