AVRO-2865: Actually bump the jar.

Author: RyanSkraba

lang/java/maven-plugin/pom.xml

@@ -61,6 +61,14 @@
       <artifactId>maven-core</artifactId>
       <version>${maven.version}</version>
     </dependency>
+    <!-- Bump this to a higher version while maven 3.3.9 still uses 3.0.22 with a -->
+    <!-- XML injection vulnerability. -->
+    <dependency>
+      <groupId>org.codehaus.plexus</groupId>
+      <artifactId>plexus-utils</artifactId>
+      <version>3.0.24</version>
+      <scope>provided</scope>
+    </dependency>
     <dependency>
       <groupId>org.apache.maven.shared</groupId>
       <artifactId>file-management</artifactId>