From 2bfb4d9512d7d91b172404dba33fcabf08fa9216 Mon Sep 17 00:00:00 2001
From: Aaron Coburn <aaronc@inrupt.com>
Date: Wed, 3 Sep 2025 10:45:19 -0500
Subject: [PATCH] JCL-476: Simplify build setup for Java 17

---
 .github/dependabot.yml | 24 ------------------------
 pom.xml                | 19 +------------------
 rdf4j/pom.xml          |  4 ----
 3 files changed, 1 insertion(+), 46 deletions(-)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 6f1b2f6f08..ac1cada015 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -5,12 +5,6 @@ updates:
     schedule:
       interval: "cron"
       cronjob: "30 4 1,15 * *"
-    ignore:
-      - dependency-name: "org.eclipse.rdf4j:rdf4j-*"
-      - dependency-name: "org.springframework.security:spring-*"
-      - dependency-name: "com.google.protobuf:protobuf-java"
-        update-types:
-          - "version-update:semver-major"
     groups:
       plugins:
         patterns:
@@ -22,22 +16,6 @@ updates:
           - "org.owasp:dependency-check-maven"
           - "com.puppycrawl.tools:checkstyle"
 
-  - package-ecosystem: "maven"
-    directory: "/rdf4j/"
-    schedule:
-      interval: "cron"
-      cronjob: "15 4 1,15 * *"
-    allow:
-      - dependency-name: "org.eclipse.rdf4j:rdf4j-*"
-
-  - package-ecosystem: "maven"
-    directory: "/spring/"
-    schedule:
-      interval: "cron"
-      cronjob: "45 4 1,15 * *"
-    allow:
-      - dependency-name: "org.springframework.security:spring-*"
-
   - package-ecosystem: "github-actions"
     directory: "/"
     schedule:
@@ -68,7 +46,6 @@ updates:
           - "org.sonarsource.scanner.maven:sonar-maven-plugin"
           - "org.sonatype.plugins:nexus-staging-maven-plugin"
           - "org.owasp:dependency-check-maven"
-          - "com.puppycrawl.tools:checkstyle"
 
   - package-ecosystem: "maven"
     directory: "/rdf4j/"
@@ -138,7 +115,6 @@ updates:
           - "org.sonarsource.scanner.maven:sonar-maven-plugin"
           - "org.sonatype.plugins:nexus-staging-maven-plugin"
           - "org.owasp:dependency-check-maven"
-          - "com.puppycrawl.tools:checkstyle"
 
   - package-ecosystem: "maven"
     directory: "/rdf4j/"
diff --git a/pom.xml b/pom.xml
index cb5585dff8..be6834a803 100644
--- a/pom.xml
+++ b/pom.xml
@@ -33,6 +33,7 @@
     <json.bind.version>3.0.1</json.bind.version>
     <okhttp.version>5.1.0</okhttp.version>
     <quarkus.version>3.24.3</quarkus.version>
+    <rdf4j.version>5.1.4</rdf4j.version>
     <slf4j.version>2.0.17</slf4j.version>
     <spring.security.version>6.5.3</spring.security.version>
     <inrupt.commons.rdf4j.version>0.6.0</inrupt.commons.rdf4j.version>
@@ -138,24 +139,6 @@
           <artifactId>guava</artifactId>
           <version>${guava.version}</version>
         </dependency>
-        <!-- transitive dependency update for CVE-2024-25710 -->
-        <dependency>
-          <groupId>org.apache.commons</groupId>
-          <artifactId>commons-compress</artifactId>
-          <version>1.28.0</version>
-        </dependency>
-        <!-- transitive dependency update for CVE-2024-31573 -->
-        <dependency>
-          <groupId>org.xmlunit</groupId>
-          <artifactId>xmlunit-core</artifactId>
-          <version>2.10.3</version>
-        </dependency>
-        <!-- transitive dependency update for CVE-2024-7254 -->
-        <dependency>
-          <groupId>com.google.protobuf</groupId>
-          <artifactId>protobuf-java</artifactId>
-          <version>3.25.8</version>
-        </dependency>
     </dependencies>
   </dependencyManagement>
 
diff --git a/rdf4j/pom.xml b/rdf4j/pom.xml
index 224ba42fc6..18d6f53786 100644
--- a/rdf4j/pom.xml
+++ b/rdf4j/pom.xml
@@ -13,10 +13,6 @@
       RDF4J integration for the Inrupt Java Client Libraries.
   </description>
 
-  <properties>
-    <rdf4j.version>5.1.4</rdf4j.version>
-  </properties>
-
   <dependencyManagement>
     <dependencies>
       <dependency>