[Snyk] Security upgrade org.springframework:spring-web from 4.3.3.RELEASE to 6.2.10

[howardfackrell]

Snyk has created this PR to fix 1 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	Relative Path Traversal SNYK-JAVA-ORGSPRINGFRAMEWORK-12008931	610	org.springframework:spring-web: 4.3.3.RELEASE -> 6.2.10 Major version upgrade No Path Found No Known Exploit

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Relative Path Traversal

[Copilot]

Pull Request Overview

This PR updates the Spring Framework dependency to address a high-severity security vulnerability (Relative Path Traversal). The upgrade moves from Spring Web 4.3.3.RELEASE to 6.2.10, which is a major version jump that fixes the security issue while also including some formatting cleanup.

• Security upgrade of org.springframework:spring-web from 4.3.3.RELEASE to 6.2.10
• Fixes high-severity Relative Path Traversal vulnerability (SNYK-JAVA-ORGSPRINGFRAMEWORK-12008931)
• Minor XML formatting improvement in Maven shade plugin configuration

---

_{Tip: Customize your code reviews with copilot-instructions.md. Create the file or learn how to get started.}

[Copilot]

This is a major version upgrade from Spring 4.3.3 to 6.2.10, which introduces breaking changes. Spring 6.x requires Java 17+ and includes significant API changes. Ensure that your codebase is compatible with Spring 6.x requirements including Java version compatibility, removal of deprecated APIs, and changes to configuration patterns.