From 51c89a7cd11dea56ad2f6dbca5ae57c7634cca6b Mon Sep 17 00:00:00 2001
From: "A.J. Stein" <alexander.stein@nist.gov>
Date: Thu, 30 Nov 2023 16:06:08 -0500
Subject: [PATCH] Update xmlresolver 5.2.0-5.2.2 to fix pom linting for other
 deps (#228)

More details with the reason for this PR can be found in the build mentioned below.

```sh
Error:  Rule 0: org.apache.maven.plugins.enforcer.RequireUpperBoundDeps failed with message:
Failed while enforcing RequireUpperBoundDeps. The error(s) are [
Require upper bound dependencies error for org.xmlresolver:xmlresolver:5.2.0 paths to dependency are:
+-gov.nist.secauto.oscal.tools.oscal-cli:cli-core:1.0.3-SNAPSHOT
  +-org.xmlresolver:xmlresolver:5.2.0
and
+-gov.nist.secauto.oscal.tools.oscal-cli:cli-core:1.0.3-SNAPSHOT
  +-org.xmlresolver:xmlresolver:5.2.0:data
and
+-gov.nist.secauto.oscal.tools.oscal-cli:cli-core:1.0.3-SNAPSHOT
  +-gov.nist.secauto.metaschema:metaschema-schema-generator:0.12.2
    +-org.xmlresolver:xmlresolver:5.2.0
and
+-gov.nist.secauto.oscal.tools.oscal-cli:cli-core:1.0.3-SNAPSHOT
  +-gov.nist.secauto.metaschema:metaschema-schema-generator:0.12.2
    +-org.xmlresolver:xmlresolver:5.2.0:data
and
+-gov.nist.secauto.oscal.tools.oscal-cli:cli-core:1.0.3-SNAPSHOT
  +-net.sf.saxon:Saxon-HE:12.4
    +-org.xmlresolver:xmlresolver:5.2.2
]
```

https://github.com/usnistgov/oscal-cli/actions/runs/7043933418/job/19170620781?pr=225
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index be5c160..e4d6a9b 100644
--- a/pom.xml
+++ b/pom.xml
@@ -116,7 +116,7 @@
 		<dependency.log4j2.version>2.20.0</dependency.log4j2.version>
 		<dependency.spotbugs-annotations.version>4.7.3</dependency.spotbugs-annotations.version>
 		<dependency.saxon-he.version>12.3</dependency.saxon-he.version>
-		<dependency.xmlresolver.version>5.2.0</dependency.xmlresolver.version>
+		<dependency.xmlresolver.version>5.2.2</dependency.xmlresolver.version>
 
 		<plugin.license.version>4.2</plugin.license.version>
 	</properties>