add upperbounds enforcer rule

Signed-off-by: Olivier Lamy <olamy@apache.org>

pom.xml

@@ -50,13 +50,13 @@
   <properties>
     <redback.version>3.0.0-SNAPSHOT</redback.version>
 
-    <slf4j.version>1.7.32</slf4j.version>
+    <slf4j.version>1.7.35</slf4j.version>
     <jetty.version>9.4.43.v20210629</jetty.version>
     <ehcache.version>3.9.9</ehcache.version>
     <spring.version>5.3.19</spring.version>
     <openjpa.version>3.1.1</openjpa.version>
     <log4j.version>2.17.1</log4j.version>
-    <jackson.version>2.11.0</jackson.version>
+    <jackson.version>2.12.2</jackson.version>
     <cxf.version>3.3.11</cxf.version>
     <io.swagger.version>2.1.10</io.swagger.version>
 
@@ -80,6 +80,7 @@
     <jakarta.validation.version>2.0.2</jakarta.validation.version>
     <jakarta.ws.rs.version>2.1.6</jakarta.ws.rs.version>
     <jakarta.activation.version>1.2.2</jakarta.activation.version>
+    <jakarta.enterprise.cdi.version>2.0.2</jakarta.enterprise.cdi.version>
 
     <!-- apache commons -->
     <commons.lang3.version>3.12.0</commons.lang3.version>
@@ -92,7 +93,7 @@
     <commons.configuration.version>2.7</commons.configuration.version>
 
     <maven3x.version>3.8.1</maven3x.version>
-    <maven.resolver.version>1.4.1</maven.resolver.version>
+    <maven.resolver.version>1.6.2</maven.resolver.version>
     <maven.indexer.version>6.0.1-SNAPSHOT</maven.indexer.version>
     <maven-model-converter.version>2.3</maven-model-converter.version>
     <wagon.version>3.3.3</wagon.version>
@@ -112,8 +113,8 @@
 
 
     <!-- Jackrabbit classes are still used for webdav -->
-    <jackrabbit.version>2.15.4</jackrabbit.version>
-    <metrics-core.version>3.1.0</metrics-core.version>
+    <jackrabbit.version>2.20.2</jackrabbit.version>
+    <metrics-core.version>4.1.18</metrics-core.version>
 
     <derbyVersion>10.13.1.1</derbyVersion>
     <httpclient.version>4.5.13</httpclient.version>
@@ -236,8 +237,6 @@
         <scope>provided</scope>
       </dependency>
 
-
-
       <dependency>
         <groupId>org.apache.openjpa</groupId>
         <artifactId>openjpa</artifactId>
@@ -269,7 +268,11 @@
           </exclusion>
         </exclusions>
       </dependency>
-
+      <dependency>
+        <groupId>org.javassist</groupId>
+        <artifactId>javassist</artifactId>
+        <version>3.27.0-GA</version>
+      </dependency>
 
       <dependency>
         <groupId>org.apache.archiva.event</groupId>
@@ -728,6 +731,11 @@
 
 
       <!-- Maven dependencies -->
+      <dependency>
+        <groupId>org.eclipse.sisu</groupId>
+        <artifactId>org.eclipse.sisu.inject</artifactId>
+        <version>0.3.4</version>
+      </dependency>
       <dependency>
         <groupId>org.apache.maven.indexer</groupId>
         <artifactId>indexer-reader</artifactId>
@@ -1474,6 +1482,21 @@
         <artifactId>commons-logging</artifactId>
         <version>${commons.logging.version}</version>
       </dependency>
+      <dependency>
+        <groupId>org.apache.commons</groupId>
+        <artifactId>commons-pool2</artifactId>
+        <version>2.6.1</version>
+      </dependency>
+      <dependency>
+        <groupId>com.fasterxml.woodstox</groupId>
+        <artifactId>woodstox-core</artifactId>
+        <version>6.2.4</version>
+      </dependency>
+      <dependency>
+        <groupId>org.codehaus.woodstox</groupId>
+        <artifactId>stax2-api</artifactId>
+        <version>4.2.1</version>
+      </dependency>
 
       <dependency>
         <groupId>org.apache.logging.log4j</groupId>
@@ -1805,6 +1828,21 @@
         <version>${junit.jupiter.version}</version>
         <scope>test</scope>
       </dependency>
+      <dependency>
+        <groupId>junit</groupId>
+        <artifactId>junit</artifactId>
+        <version>4.13.2</version>
+      </dependency>
+      <dependency>
+        <groupId>org.osgi</groupId>
+        <artifactId>org.osgi.core</artifactId>
+        <version>6.0.0</version>
+      </dependency>
+      <dependency>
+        <groupId>net.java.dev.jna</groupId>
+        <artifactId>jna</artifactId>
+        <version>5.8.0</version>
+      </dependency>
 
       <dependency>
         <groupId>org.json</groupId>