HPCC4J-658 Upgrade out-of-date dependencies

- Upgraded commons-io to new version
- Add version overrides for Axis2 deps with vulnerabilities

Signed-off-by: James McMullan [email protected]

pom.xml

@@ -49,7 +49,7 @@
     <antlr.version>4.10.1</antlr.version>
     <javax.mail.version>1.4</javax.mail.version>
     <jsch.version>0.1.54</jsch.version>
-    <commons-io.version>2.7</commons-io.version>
+    <commons-io.version>2.14.0</commons-io.version>
     <junit.version>4.13.1</junit.version>
     <json.version>20231013</json.version>
     <log4j.version>2.17.1</log4j.version>
@@ -62,6 +62,8 @@
     <groups>org.hpccsystems.commons.annotations.BaseTests</groups>
     <codehaus.template.version>1.0.0</codehaus.template.version>
     <project.benchmarking>false</project.benchmarking>
+    <xalan.version>2.7.3</xalan.version>
+    <commons-fileupload.version>1.5</commons-fileupload.version>
   </properties>
 
   <scm>
@@ -162,7 +164,7 @@
 			<artifactId>axis2-transport-local</artifactId>
 			<version>${axis2.version}</version>
 		</dependency>
-		<dependency>
+	    <dependency>
 			<groupId>org.apache.axis2</groupId>
 			<artifactId>axis2-adb</artifactId>
 			<version>${axis2.version}</version>
@@ -172,6 +174,16 @@
 			<artifactId>axis2-jaxws</artifactId>
 			<version>${axis2.version}</version>
     </dependency>
+    <dependency>
+      <groupId>xalan</groupId>
+      <artifactId>xalan</artifactId>
+      <version>${xalan.version}</version>
+    </dependency>
+    <dependency>
+      <groupId>commons-fileupload</groupId>
+      <artifactId>commons-fileupload</artifactId>
+      <version>${commons-fileupload.version}</version>
+    </dependency>
   </dependencies>
 
   <build>