Upgrade Spring dependency versions to remediate vulnerabilities

pom.xml

@@ -14,9 +14,9 @@
         <openapi.version>1.6.14</openapi.version>
         <json-smart.version>2.5.0</json-smart.version>
         <jackson.version>2.16.1</jackson.version>
-        <spring-framework-version>6.1.4</spring-framework-version>
-        <spring-boot.version>3.2.3</spring-boot.version>
-        <spring-security.version>6.2.2</spring-security.version>
+        <spring-framework-version>6.1.5</spring-framework-version>
+        <spring-boot.version>3.2.4</spring-boot.version>
+        <spring-security.version>6.2.3</spring-security.version>
     </properties>
 
     <licenses>
@@ -73,6 +73,7 @@
                 <artifactId>spring-framework-bom</artifactId>
                 <version>${spring-framework-version}</version>
                 <type>pom</type>
+                <scope>import</scope>
             </dependency>
             <dependency>
                 <groupId>org.springframework.boot</groupId>
@@ -86,6 +87,7 @@
                 <artifactId>spring-security-bom</artifactId>
                 <version>${spring-security.version}</version>
                 <type>pom</type>
+                <scope>import</scope>
             </dependency>
             <dependency>
                 <groupId>org.opengroup.osdu</groupId>

provider/legal-azure/pom.xml

@@ -34,7 +34,7 @@
         <osdu.corelibazure.version>0.26.0-rc6</osdu.corelibazure.version>
         <osdu.legal-core.version>0.26.0-SNAPSHOT</osdu.legal-core.version>
         <woodstox-core.version>6.4.0</woodstox-core.version>
-        <netty.version>4.1.101.Final</netty.version>
+        <netty.version>4.1.107.Final</netty.version>
         <argLine>--add-opens java.base/java.lang=ALL-UNNAMED</argLine>
         <reactor-netty-http.version>1.1.13</reactor-netty-http.version>
         <azure-active-directory.version>5.10.0</azure-active-directory.version>