MLE-24826 Bumping Spring, undertow for CVEs

Also bumped an old version of xmlunit. Pretty sure the junit:junit stuff can be easily removed next.

Author: rjrudin

build.gradle

@@ -23,7 +23,6 @@ subprojects {
 	}
 
 	repositories {
-		mavenLocal()
 		mavenCentral()
 
 		// Needed so that ml-development-tools can resolve snapshots of marklogic-client-api.

marklogic-client-api-functionaltests/build.gradle

@@ -15,7 +15,7 @@ dependencies {
 
 	testImplementation 'org.apache.commons:commons-lang3:3.19.0'
 
-	testImplementation "com.marklogic:ml-app-deployer:6.1.0"
+	testImplementation "com.marklogic:ml-app-deployer:6.2-SNAPSHOT"
 
 	testImplementation 'ch.qos.logback:logback-classic:1.5.19'
 	testImplementation 'org.junit.jupiter:junit-jupiter:5.14.0'

marklogic-client-api/build.gradle

@@ -36,7 +36,7 @@ dependencies {
 	compileOnly 'org.dom4j:dom4j:2.2.0'
 	compileOnly 'com.google.code.gson:gson:2.13.2'
 
-	testImplementation 'org.junit.jupiter:junit-jupiter:5.13.4'
+	testImplementation 'org.junit.jupiter:junit-jupiter:5.14.0'
 
 	// Forcing junit version to avoid vulnerability with older version in xmlunit
 	testImplementation 'junit:junit:4.13.2'
@@ -46,7 +46,7 @@ dependencies {
 	testImplementation 'org.apache.commons:commons-lang3:3.19.0'
 
 	// Allows talking to the Manage API.
-	testImplementation "com.marklogic:ml-app-deployer:6.1.0"
+	testImplementation "com.marklogic:ml-app-deployer:6.2-SNAPSHOT"
 
 	testImplementation "org.mockito:mockito-core:5.20.0"
 	testImplementation "org.mockito:mockito-inline:5.2.0"

ml-development-tools/build.gradle

@@ -32,7 +32,7 @@ dependencies {
 	// Not yet migrating this project to JUnit 5. Will reconsider it once we have a reason to enhance
 	// this project.
 	testImplementation 'junit:junit:4.13.2'
-	testImplementation 'xmlunit:xmlunit:1.6'
+	testImplementation 'org.xmlunit:xmlunit-legacy:2.10.4'
 	testCompileOnly gradleTestKit()
 
 	testImplementation "com.squareup.okhttp3:okhttp:${okhttpVersion}"

test-app/build.gradle

@@ -9,8 +9,8 @@ plugins {
 }
 
 dependencies {
-	implementation "io.undertow:undertow-core:2.3.19.Final"
-	implementation "io.undertow:undertow-servlet:2.3.19.Final"
+	implementation "io.undertow:undertow-core:2.3.20.Final"
+	implementation "io.undertow:undertow-servlet:2.3.20.Final"
 	implementation 'org.slf4j:slf4j-api:2.0.17'
 	implementation 'ch.qos.logback:logback-classic:1.5.19'
 	implementation "com.fasterxml.jackson.core:jackson-databind:${jacksonVersion}"