fix: CVE fixes (#1159)

* fix: upgrade tomcat to 11.0.8 * chore: build version and changelog

Author: tamassoltesz

CHANGELOG.md

@@ -9,6 +9,7 @@ to [Semantic Versioning](https://semver.org/spec/v2.0.0.html).
 
 ## [11.0.5]
 
+- Upgrades the embedded tomcat to 11.0.8 because of security vulnerabilities
 - Adds back previously removed `implementationDependencies.json`, but now it is generated by the build process
 
 ## [11.0.4]

build.gradle

@@ -45,7 +45,7 @@ dependencies {
  implementation group: 'ch.qos.logback', name: 'logback-classic', version: '1.5.13'
 
  // https://mvnrepository.com/artifact/org.apache.tomcat.embed/tomcat-embed-core
- api group: 'org.apache.tomcat.embed', name: 'tomcat-embed-core', version: '11.0.6'
+ api group: 'org.apache.tomcat.embed', name: 'tomcat-embed-core', version: '11.0.8'
 
  // https://mvnrepository.com/artifact/com.google.code.findbugs/jsr305
  implementation group: 'com.google.code.findbugs', name: 'jsr305', version: '3.0.2'