Task 5: Upgrade JAXB, commons-lang3, javax.el, Micrometer

[devin-ai-integration]

Summary

Upgrades four dependency groups to more modern, maintained versions while staying on the javax namespace (Spring Boot 2.x compatibility):

1. JAXB (ftgo-common/build.gradle)

• Replaced jaxb-api:2.2.11, jaxb-core:2.2.11, jaxb-impl:2.2.11, and javax.activation:1.1.1 with jaxb-api:2.3.1 + jaxb-runtime:2.3.9 (GlassFish reference implementation)

2. commons-lang → commons-lang3

• Updated dependency from commons-lang:commons-lang:2.6 to org.apache.commons:commons-lang3:3.14.0 in both ftgo-common/build.gradle and buildSrc/build.gradle
• Updated all 8 Java source files (24 import statements) from org.apache.commons.lang.builder.* to org.apache.commons.lang3.builder.*

3. javax.el

• Upgraded javax.el:javax.el-api from 2.2.5 to 3.0.0 in:
  • ftgo-order-service/build.gradle
  • ftgo-consumer-service/build.gradle
  • ftgo-restaurant-service/build.gradle
  • ftgo-courier-service/build.gradle

4. Micrometer

• Upgraded micrometerVersion from 1.0.4 to 1.13.0 in gradle.properties

Review & Testing Checklist for Human

• Verify the application compiles successfully with ./gradlew build
• Confirm JAXB XML binding still works at runtime (serialization/deserialization)
• Verify commons-lang3 EqualsBuilder, HashCodeBuilder, ToStringBuilder behave identically to commons-lang2 equivalents
• Check Micrometer 1.13.0 Prometheus metrics endpoint still functions correctly

Notes

• The JAXB upgrade stays on javax.xml.bind namespace since the project targets Spring Boot 2.x (not Jakarta EE)
• commons-lang3 is a drop-in replacement for the builder classes used in this project
• 15 files changed across build configs and Java source files

Link to Devin session: https://app.devin.ai/sessions/555aa3c579804511b0180f68bc0d5124
Requested by: @WesternConcrete

---

Devin Review

Status	Commit
⚪ Not started	—

Run Devin Review

💡 Connect your GitHub account to enable automatic code reviews.

---

[devin-ai-integration]

🤖 Devin AI Engineer

I'll be helping with this pull request! Here's what you should know:

✅ I will automatically:

• Address comments on this PR. Add '(aside)' to your comment to have me ignore it.
• Look at CI failures and help fix them

Note: I can only respond to comments from users who have write access to this repository.

⚙️ Control Options:

• Disable automatic comment and CI monitoring

[devin-ai-integration]

✅ Devin Review: No Issues Found

Devin Review analyzed this PR and found no potential bugs to report.

View in Devin Review to see 1 additional finding.