Bumps xmlgraphics-commons from 2.3 to 2.6.

---
updated-dependencies:
- dependency-name: org.apache.xmlgraphics:xmlgraphics-commons
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

Bumps [spring-core](https://github.com/spring-projects/spring-framework) from 5.3.15 to 5.3.19.
- [Release notes](https://github.com/spring-projects/spring-framework/releases)
- [Commits](https://github.com/spring-projects/spring-framework/compare/v5.3.15...v5.3.19)

---
updated-dependencies:
- dependency-name: org.springframework:spring-core
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Add a master pom.xml as an entrypoint for dependabot

* Add vulnerable log4j dependency to test dependabot

* Fix pom generation

* Moved bom files to make dependabot recognize them

* Remove dependencies from root pom.xml

* Add local poms as modules, not dependencies

* Revert "Moved bom files to make dependabot recognize them"

This reverts commit 1742e08ed2.

* Revert "Revert "Moved bom files to make dependabot recognize them""

This reverts commit 1f17702f9b.

* Make generate_master_pom.sh executable

* Update README

* Revert "Add vulnerable log4j dependency to test dependabot"

This reverts commit 7d45af18af.