Update or replace dependencies to prevent vulnerabilities from transitive dependencies

[gblaih]

<groupId>org.springframework.security</groupId>
<artifactId>spring-security-saml2-service-provider</artifactId>

<groupId>org.springframework.security</groupId>
<artifactId>spring-security-jwt</artifactId>

These dependencies are pulling in versions of other dependencies that contain vulnerabilities, such as those from org.apache.velocity and org.bouncycastle. See if these parent dependencies can be updated or replaced to prevent the need to force versions on or exclude their transitive dependencies.