Spring [Question] json-path still in version 2.8.0 with vulnerabilities while spring-boot-starter-test is requiring the 2.9.0

Affects: 3.2.3

Please, someone can help us to understand why Gradle still installing the implementation 'com.jayway.jsonpath:json-path:2.8.0' when the spring-boot-starter-test was upgraded to the implementation 'com.jayway.jsonpath:json-path:2.9.0'?

We tried to force the transient dependency updates, but with no success:

./gradlew clean --refresh-dependencies

Maven dependency tree

IntelliJ dependency analyzer

IntelliJ warning

Comment From: douglasjunior

Got it, I need to upgrade the gradle plugin too.

    id 'org.springframework.boot' version '3.2.3'