[Task]: Update Java BOM dependencies

[lostluck]

What needs to happen?

Follow
https://cwiki.apache.org/confluence/display/BEAM/Dependency+Upgrades to update Java Bom dependencies prior to the release cut, if necessary. If unsure, ask the dev list for assistance or an opinion.

Then move the milestone to the next release.

Issue Priority

Priority: 2

Issue Components

• Component: Python SDK
• Component: Java SDK
• Component: Go SDK
• Component: Typescript SDK
• Component: IO connector
• Component: Beam examples
• Component: Beam playground
• Component: Beam katas
• Component: Website
• Component: Spark Runner
• Component: Flink Runner
• Component: Samza Runner
• Component: Twister2 Runner
• Component: Hazelcast Jet Runner
• Component: Google Cloud Dataflow Runner

[kennknowles]

The BOM had a minor version update last week. It is pretty high risk to make the change right before the release. I think this should really be post-release-branch-cut work so we have some time to stabilize. I'll ask around about any vital fixes included.

[kennknowles]

The docs have been moved to https://github.com/apache/beam/blob/master/contributor-docs/java-dependency-upgrades.md

[kennknowles]

I am moving this to the next milestone since we need to get 2.51.0 out the door and I am not aware of critical vulnerabilities. I will get it updated on master concurrently with the release, and it can have time to bake. If anyone is aware of a critical vulnerability, please raise it.