Bump dependencies because of several CVEs

[mjechow]

No description provided.

[luisgoncalves]

Thanks for this!

Can you please rebase? I've update a missing CRL to fix tests.

Also tried building, javadocs and tests locally. Looks good.

[mjechow]

Thanks. I hope the bumps of dependencies like gpg-plugin work. I cannot test them.

Furthermore, I saw some remarks by SonarLint. I you don't mind, I will refactor some parts of code time by time. Is it planned to switch to JUnit5?

Also Guice 7.0.0 is released with a slightly different api. Time will come, when xades4j needs to be updated.

[mjechow]

Again, I did't rebase but merge. Sorry. I am not used to the gitHub GUI. :-(

[luisgoncalves]

Right, I'll test those when preparing another release.

Sure, feel free to submit PRs :) I'll attend to them as time allows. Most of the library was written 10+ years ago; the language evolved a lot since then.

Regarding Junit5, I actually started upgrading. I'll try to pick up on that again soon.