update xerces (#1005)

Author: vladislav-sidorovich

dumper/app/build.gradle

@@ -113,6 +113,10 @@ dependencies {
         //Not used and has LGPLv3 transient deps
         exclude group: 'org.apache.oozie', module: 'oozie-fluent-job-api'
     }
+
+    //Overrides for oozie-client transient deps
+    implementation libs.xerces // explicit version for vulnerabilities update
+
     implementation libs.hadoop.auth
 
     // `implementation` scope is used because some of our dependencies

dumper/app/gradle.lockfile

@@ -273,6 +273,6 @@ org.threeten:threetenbp:1.7.0=compileClasspath,runtimeClasspath,testCompileClass
 org.xerial.snappy:snappy-java:1.1.10.4=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
 org.xerial:sqlite-jdbc:3.49.1.0=testCompileClasspath,testRuntimeClasspath
 org.yaml:snakeyaml:2.4=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
-xerces:xercesImpl:2.11.0=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
+xerces:xercesImpl:2.12.2=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
 xml-apis:xml-apis:1.4.01=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
 empty=

gradle/libs.versions.toml

@@ -77,6 +77,7 @@ netty-handler = "4.1.127.Final"
 dnsjava = "3.6.3"
 nimbus-jose-jwt = "9.37.4"
 io-grpc = "1.76.0"
+xerces = "2.12.2"
 
 [libraries]
 apache-avro = { module = "org.apache.avro:avro", version.ref = "apache-avro" }
@@ -182,6 +183,7 @@ h2 = { group = "com.h2database", name = "h2", version.ref = "h2" }
 parquet-generator = { group = "org.apache.parquet", name = "parquet-generator", version.ref = "parquet" }
 parquet = { group = "org.apache.parquet", name = "parquet", version.ref = "parquet" }
 oozie-client = { group = "org.apache.oozie", name = "oozie-client", version.ref = "oozie-client"}
+xerces = { module = "xerces:xercesImpl", version.ref = "xerces"}
 jna = { group = "net.java.dev.jna", "name" = "jna", version.ref = "jna"}
 
 [plugins]