fix(deps): update all minor dependencies (v2-main)

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
org.apache.maven.plugins:maven-surefire-plugin (source)	3.5.5 → 3.5.6
org.junit.jupiter:junit-jupiter (source)	5.14.3 → 5.14.4
org.apache.logging.log4j:log4j-slf4j-impl (source)	2.25.4 → 2.26.1
org.xmlunit:xmlunit-assertj3 (source)	2.11.0 → 2.13.0
org.slf4j:slf4j-api (source, changelog)	2.0.17 → 2.0.18
commons-io:commons-io (source)	2.21.0 → 2.22.0
net.sf.saxon:Saxon-HE (source)	12.9 → 12.10

---

Release Notes

apache/maven-surefire (org.apache.maven.plugins:maven-surefire-plugin)

v3.5.6

xmlunit/xmlunit (org.xmlunit:xmlunit-assertj3)

v2.13.0

Compare Source

• added explicit settings to the Validator classes that disable (external) DTD loading during validation. The default
  remains to allow loading of external content as this is often a requirement during validation.

  PRs #​331 and #​332 by
  @​jmestwa-coder

• added constructor overloads to JAXPXPathEngine to allow specifying the DocumentBuilderFactory used for the
  Source overloads of the selectNodes and evaluate methods.

  PRs #​333 by @​jmestwa-coder

• IsDateTimePlaceholderHandler now parses the explicit and ISO date formats using Locale.US rather than the JVM
  default locale so results no longer depend on the host locale. An optional second argument allows specifying a
  different locale as a BCP 47 language tag.

  PR #​335 by @​jmestwa-coder

v2.12.0

Compare Source

• bumped xmlunit-assertj3's dependency on assert to 3.27.7.

  This is to make people aware of
  GHSA-rqfh-9r24-8c9r

  XMLUnit itself does not use the affected code in AssertJ so the upgrade is not strictly necessary - and this is why
  the xmlunit-assertj module is not updated. In fact the assertions provided by xmlunit-assertj3 are the recommended
  upgrade path for users of AssertJ 3.x+.

  PRs #​320 and
  #​321

• actually made withDTDParsingDisabled do what it says.

  This is a bugfix and in a way it is backwards incompatible as it changes default behavior in a way that I intended to
  do with XMLUnit 2.6.0 eight years ago. DocumentBuilderFactoryConfigurer.DefaultWithDTDParsing provides the
  behavior of XMLUnit 2.6.0 to 2.11.0.

  PRs #​326 by @​jmestwa-coder
  and #​328

---

Configuration

📅 Schedule: (in timezone Europe/Paris)

• Branch creation
  • "every weekend"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud