Release 1.4.9. (#60)

* Address some security vulnerabilities. (#41)

* Configure dependabot to target develop. (#42)

* Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.11.3 (#46)

Bumps [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) from 3.6.3 to 3.11.3.
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.6.3...maven-javadoc-plugin-3.11.3)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-version: 3.11.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump com.google.code.gson:gson from 2.10.1 to 2.13.1 (#45)

Bumps [com.google.code.gson:gson](https://github.com/google/gson) from 2.10.1 to 2.13.1.
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.10.1...gson-parent-2.13.1)

---
updated-dependencies:
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.13.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump org.springframework.boot:spring-boot-starter-parent (#44)

Bumps [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) from 3.5.4 to 3.5.5.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.4...v3.5.5)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 3.5.5
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Switch to Java 21. (#47)

* Potential fix for code scanning alert no. 10: Log Injection (#48)

Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>

* Bump org.springframework.boot:spring-boot-starter-parent (#50)


Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Advance parent pom to 1.4.4. (#51)

* Bump com.diffplug.spotless:spotless-maven-plugin from 2.46.1 to 3.0.0 (#53)

Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 2.46.1 to 3.0.0.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@maven/2.46.1...lib/3.0.0)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.11.3 to 3.12.0 (#52)

Bumps [org.apache.maven.plugins:maven-javadoc-plugin](https://github.com/apache/maven-javadoc-plugin) from 3.11.3 to 3.12.0.
- [Release notes](https://github.com/apache/maven-javadoc-plugin/releases)
- [Commits](apache/maven-javadoc-plugin@maven-javadoc-plugin-3.11.3...maven-javadoc-plugin-3.12.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-javadoc-plugin
  dependency-version: 3.12.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump com.google.code.gson:gson from 2.13.1 to 2.13.2 (#49)

Bumps [com.google.code.gson:gson](https://github.com/google/gson) from 2.13.1 to 2.13.2.
- [Release notes](https://github.com/google/gson/releases)
- [Changelog](https://github.com/google/gson/blob/main/CHANGELOG.md)
- [Commits](google/gson@gson-parent-2.13.1...gson-parent-2.13.2)

---
updated-dependencies:
- dependency-name: com.google.code.gson:gson
  dependency-version: 2.13.2
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* DW-33 Build with GitHub Actions (#55)

* Bump org.springframework.boot:spring-boot-starter-parent (#56)

Bumps [org.springframework.boot:spring-boot-starter-parent](https://github.com/spring-projects/spring-boot) from 3.5.6 to 3.5.7.
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
- [Commits](spring-projects/spring-boot@v3.5.6...v3.5.7)

---
updated-dependencies:
- dependency-name: org.springframework.boot:spring-boot-starter-parent
  dependency-version: 3.5.7
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Bump com.diffplug.spotless:spotless-maven-plugin from 3.0.0 to 3.1.0 (#57)

Bumps [com.diffplug.spotless:spotless-maven-plugin](https://github.com/diffplug/spotless) from 3.0.0 to 3.1.0.
- [Release notes](https://github.com/diffplug/spotless/releases)
- [Changelog](https://github.com/diffplug/spotless/blob/main/CHANGES.md)
- [Commits](diffplug/spotless@lib/3.0.0...lib/3.1.0)

---
updated-dependencies:
- dependency-name: com.diffplug.spotless:spotless-maven-plugin
  dependency-version: 3.1.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

* Update parent POM version from 1.4.4-SNAPSHOT to 1.4.4. (#59)

* Update .github/GHA.rmd

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update kafka-service/src/main/java/edu/cornell/eipm/messaging/microservices/kafka/dispatcher/broker/producer/Sender.java

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Update GHA doc.

Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

* Address copilot review.

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Copilot Autofix powered by AI <62310815+github-advanced-security[bot]@users.noreply.github.com>
Co-authored-by: Copilot <175728472+Copilot@users.noreply.github.com>

Author: 4 people

.github/GHA.rmd

@@ -0,0 +1,33 @@
+## GitHub Actions Workflow: Build DispatcherSuite
+
+This workflow automates building and testing the project using Maven and JDK 17 on every push and pull request.
+
+### Workflow Location
+
+- File: `.github/workflows/build.yml`
+
+### Triggers
+
+- Runs on every push to any branch.
+
+### Steps
+
+1. **Checkout Code**  
+Clones the repository using the official GitHub action.
+
+2. **Set Up JDK 21**  
+Installs the Temurin 21 distribution for building the project.
+
+3. **Cache Maven Dependencies**  
+Caches the local Maven repository (`~/.m2/repository`) to speed up builds.
+
+4. **Build and Test**  
+Executes `mvn clean package --batch-mode` to build the project and run all tests.
+
+## Build status
+
+[![Build DispatcherSuite](https://github.com/eipm/DispatcherSuite/actions/workflows/build.yml/badge.svg)](https://github.com/eipm/DispatcherSuite/actions/workflows/build.yml)
+
+---
+
+The build workflow ensures the code is built and tested automatically, helping maintain code quality.

.github/workflows/build.yml

@@ -0,0 +1,36 @@
+name: Build DispatcherSuite
+
+on:
+  push:
+    branches: [ "**" ]
+
+jobs:
+  build:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout code
+        uses: actions/checkout@v4
+
+      - name: Set up JDK 21
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '21'
+
+      - name: Cache Maven packages
+        uses: actions/cache@v4
+        with:
+          path: ~/.m2/repository
+          key: ${{ runner.os }}-maven-${{ hashFiles('**/pom.xml') }}
+          restore-keys: |
+            ${{ runner.os }}-maven-
+
+      - name: Build with Maven
+        run: mvn clean package --batch-mode
+
+      - name: Upload build artifact
+        uses: actions/upload-artifact@v4
+        with:
+          name: kafka-service-war
+          path: kafka-service/target/*.war

.idea/misc.xml

@@ -2,15 +2,17 @@
 
 ![logo](doc/dispatcher-services-logo.png)
 
+A set of microservices to interface with different messaging systems.
+
 [![Github](https://img.shields.io/badge/github-1.4.9-green?style=flat&logo=github)](https://github.com/eipm/DispatcherSuite) [![License: MIT](https://img.shields.io/badge/License-MIT-yellow.svg)](https://opensource.org/licenses/MIT) [![DOI](https://zenodo.org/badge/DOI/10.5281/zenodo.14975839.svg)](https://zenodo.org/doi/10.5281/zenodo.14975839)
 
-A set of microservices to interface with different messaging systems.
+[![Build DispatcherSuite](https://github.com/eipm/DispatcherSuite/actions/workflows/build.yml/badge.svg)](https://github.com/eipm/DispatcherSuite/actions/workflows/build.yml)
 
 ## 🤝 License
 See [LICENSE](./LICENSE)
 
 ## 📚 How to Cite
-> Manuele Simi, Alexandros Sigaras, Jeff Tang, & Pantelis Zisimopoulos. (2025). eipm/DispatcherSuite: v1.4.9 (v1.4.9). Zenodo. [https://zenodo.org/records/14975856](https://zenodo.org/records/14975856)
+> Manuele Simi, Alexandros Sigaras, Jeff Tang, & Pantelis Zisimopoulos. (2025). eipm/DispatcherSuite: v1.4.8 (v1.4.8). Zenodo. [https://zenodo.org/records/14975856](https://zenodo.org/records/14975856)
 
 ## Modules
 * [Kafka-Dispatcher Service](kafka-service/README.md) - to interface with Apache Kafka brokers (on-prem or on the cloud, like Microsoft EventHubs or AWS MSK)

.idea/workspace.xml

@@ -5,7 +5,7 @@
     <parent>
         <artifactId>dispatcher-suite</artifactId>
         <groupId>edu.cornell.eipm.messaging.microservices</groupId>
-        <version>1.4.2-SNAPSHOT</version>
+        <version>1.4.4</version>
     </parent>
     <modelVersion>4.0.0</modelVersion>
     <artifactId>executors</artifactId>
@@ -34,7 +34,7 @@
         <dependency>
             <groupId>com.google.code.gson</groupId>
             <artifactId>gson</artifactId>
-            <version>2.10.1</version>
+            <version>2.13.2</version>
         </dependency>
 
         <dependency>

README.md

@@ -5,7 +5,7 @@
     <parent>
         <artifactId>dispatcher-suite</artifactId>
         <groupId>edu.cornell.eipm.messaging.microservices</groupId>
-        <version>1.4.2-SNAPSHOT</version>
+        <version>1.4.4</version>
     </parent>
     <modelVersion>4.0.0</modelVersion>
 
@@ -79,7 +79,7 @@
         <dependency>
             <groupId>com.google.code.gson</groupId>
             <artifactId>gson</artifactId>
-            <version>2.10.1</version>
+            <version>2.13.2</version>
         </dependency>
 
         <dependency>

executors/pom.xml

@@ -50,19 +50,21 @@ public class Sender {
    * @param values the values to send as message's payload
    */
   public void send(String topic, Map<String, String> values) {
+    // Sanitize the topic parameter to prevent log injection
+    String sanitizedTopic = topic.replaceAll("[^a-zA-Z0-9._-]", "");
     String json = new JSONPayloadSerializer(values).toJSON();
-    LOGGER.info("sending payload='{}' to topic {}", json, topic);
-    CompletableFuture<SendResult<String, String>> future = kafkaTemplate.send(topic, topic, json);
+    LOGGER.info("sending payload='{}' to topic {}", json, sanitizedTopic);
+    CompletableFuture<SendResult<String, String>> future = kafkaTemplate.send(sanitizedTopic, sanitizedTopic, json);
     future.whenCompleteAsync(
         (result, throwable) -> {
           if (throwable != null) {
             LOGGER.error(
-                "Unable to send message to =[" + topic + "] due to : " + throwable.getMessage());
+                "Unable to send message to =[" + sanitizedTopic + "] due to : " + throwable.getMessage());
             future.completeExceptionally(throwable);
           } else {
             LOGGER.info(
                 "Sent message to topic=["
-                    + topic
+                    + sanitizedTopic
                     + "] with offset=["
                     + result.getRecordMetadata().offset()
                     + "]");

kafka-service/pom.xml

@@ -10,19 +10,19 @@
     <parent>
         <groupId>org.springframework.boot</groupId>
         <artifactId>spring-boot-starter-parent</artifactId>
-        <version>3.5.4</version>
+        <version>3.5.7</version>
         <relativePath/> <!-- lookup parent from repository -->
     </parent>
     <groupId>edu.cornell.eipm.messaging.microservices</groupId>
     <artifactId>dispatcher-suite</artifactId>
     <name>Dispatcher Suite</name>
-    <version>1.4.2-SNAPSHOT</version>
+    <version>1.4.4</version>
     <packaging>pom</packaging>
     <description>Dispatcher Services Suite</description>
 
     <properties>
-        <java.version>18</java.version>
-        <spotless.version>2.46.1</spotless.version>
+        <java.version>21</java.version>
+        <spotless.version>3.1.0</spotless.version>
     </properties>
 
     <build>
@@ -62,7 +62,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-javadoc-plugin</artifactId>
-                <version>3.6.3</version>
+                <version>3.12.0</version>
                 <executions>
                     <execution>
                         <id>main-javadoc</id>