chore: refresh Java dependency and plugin versions

[tkuhn]

Summary

• Bumps small / patch versions for one runtime dep, one test dep, and three Maven plugins.
• Each bump is a separate commit so it can be reverted independently.

Bumps

• jackson-dataformat-yaml 3.1.2 → 3.1.3
• junit-jupiter 6.0.2 → 6.0.3
• maven-war-plugin 3.4.0 → 3.5.1
• maven-dependency-plugin 3.8.1 → 3.10.0
• maven-surefire-plugin 3.5.3 → 3.5.5

Not included

• Wicket 10.8.0 → 10.9.0: dropped from this PR. wicketstuff-kendo-ui, wicketstuff-kendo-ui-theme-default, and wicketstuff-select2 are pinned to ${wicket.version} but wicketstuff has not yet published 10.9.0 to Maven Central. Re-bump once wicketstuff catches up.
• httpclient 4.5.14: Apache HttpClient 4.x is EOL, but moving to httpclient5 5.x is an API migration, not a version bump.
• maven-compiler-plugin 4.0.0-beta-4: beta, skipped.

Test plan

• mvn test — 673 tests, 0 failures. (Two WicketApplicationTest errors on the first run were transient network failures during new WicketApplication(); re-running the class in isolation passed 6/6.)

🤖 Generated with Claude Code

[github-actions]

🎉 This PR is included in version 4.27.1 🎉

The release is available on:

• nanodash-4.27.1
• GitHub release

Your semantic-release bot 📦🚀