fix: pom.xml to reduce vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-7569538

pom.xml

@@ -138,7 +138,7 @@
     <mockito.version>5.12.0</mockito.version>
     <okhttp.version>4.10.0</okhttp.version>
     <org.spdx.java.spdx.library.version>1.1.1</org.spdx.java.spdx.library.version>
-    <org.spdx.tools.java.version>1.1.5</org.spdx.tools.java.version>
+    <org.spdx.tools.java.version>1.1.8</org.spdx.tools.java.version>
     <package-url.version>1.4.1</package-url.version>
     <poi.version>4.1.2</poi.version>
     <project-lombok.version>1.18.24</project-lombok.version>
@@ -300,7 +300,7 @@
       <dependency>
         <groupId>org.cyclonedx</groupId>
         <artifactId>cyclonedx-core-java</artifactId>
-        <version>7.3.2</version>
+        <version>8.0.0</version>
       </dependency>
       <dependency>
         <groupId>org.apache.maven</groupId>