dependency updates

[mbien]

• asm, spring, lucene, logging, apache commons libs
• webjars: jquery and jquery-validation
• build: junit, selenium and other maven plugins

note: spring closed CVE-2024-38816, but it shouldn't affect roller since we don't use spring-webmvc or spring-webflux

[snoopdave]

ChatGPT 4o summary based on the diff:

app/pom.xml

asm.version: 9.6 -> 9.7
commons-validator.version: 1.8.0 -> 1.9.0
commons-codec.version: 1.16.0 -> 1.17.1
commons-text.version: 1.11.0 -> 1.12.0
commons-lang3.version: 3.14.0 -> 3.16.0
eclipse-link.version: 4.0.2 -> 4.0.4
log4j2.version: 2.22.1 -> 2.23.1
lucene.version: 9.9.1 -> 9.11.1
maven-surefire.version: 3.2.5 -> 3.5.0
slf4j.version: 2.0.11 -> 2.0.16
spring.version: 5.3.31 -> 5.3.39
spring.security.version: 5.8.8 -> 5.8.14
jquery-ui: 1.13.2 -> 1.13.3
jquery-validation: 1.19.5 -> 1.20.0
mockito-core: 5.9.0 -> 5.12.0
instancio-junit: 4.0.0 -> 5.0.1

it-selenium/pom.xml

selenium-java: 4.17.0 -> 4.23.1
selenium-firefox-driver: 4.17.0 -> 4.23.1
maven-failsafe-plugin: 3.2.5 -> 3.5.0

pom.xml

jetty.plugin.version: 10.0.19 -> 10.0.23
maven-compiler-plugin: 3.12.1 -> 3.13.0
versions-maven-plugin: 2.16.2 -> 2.17.1
junit-jupiter-engine: 5.10.1 -> 5.11.0

[snoopdave]

LGTM 🐝