Various maven plugin security fixups (#284)

* Bump google-cloud-spanner-jdbc from 2.6.1 to 2.9.9

Bumps [google-cloud-spanner-jdbc](https://github.com/googleapis/java-spanner-jdbc) from 2.6.1 to 2.9.9.
- [Release notes](https://github.com/googleapis/java-spanner-jdbc/releases)
- [Changelog](https://github.com/googleapis/java-spanner-jdbc/blob/main/CHANGELOG.md)
- [Commits](googleapis/java-spanner-jdbc@v2.6.1...v2.9.9)

---
updated-dependencies:
- dependency-name: com.google.cloud:google-cloud-spanner-jdbc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump maven-dependency-plugin from 3.3.0 to 3.5.0

Bumps [maven-dependency-plugin](https://github.com/apache/maven-dependency-plugin) from 3.3.0 to 3.5.0.
- [Release notes](https://github.com/apache/maven-dependency-plugin/releases)
- [Commits](apache/maven-dependency-plugin@maven-dependency-plugin-3.3.0...maven-dependency-plugin-3.5.0)

---
updated-dependencies:
- dependency-name: org.apache.maven.plugins:maven-dependency-plugin
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump sqlite-jdbc from 3.36.0.3 to 3.41.2.1

Bumps [sqlite-jdbc](https://github.com/xerial/sqlite-jdbc) from 3.36.0.3 to 3.41.2.1.
- [Release notes](https://github.com/xerial/sqlite-jdbc/releases)
- [Changelog](https://github.com/xerial/sqlite-jdbc/blob/master/CHANGELOG)
- [Commits](xerial/sqlite-jdbc@3.36.0.3...3.41.2.1)

---
updated-dependencies:
- dependency-name: org.xerial:sqlite-jdbc
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>

* Bump jaxb-runtime from 4.0.0 to 4.0.2

Bumps jaxb-runtime from 4.0.0 to 4.0.2.

---
updated-dependencies:
- dependency-name: org.glassfish.jaxb:jaxb-runtime
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>

* Combines a number of dependabot updates into a single PR

Closes #278
Closes #262
Closes #272
Closes #275

---------

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: bpkroth

pom.xml

@@ -58,7 +58,7 @@
                 <dependency>
                     <groupId>org.xerial</groupId>
                     <artifactId>sqlite-jdbc</artifactId>
-                    <version>3.36.0.3</version>
+                    <version>3.41.2.1</version>
                 </dependency>
             </dependencies>
         </profile>
@@ -110,7 +110,7 @@
                 <dependency>
                     <groupId>com.google.cloud</groupId>
                     <artifactId>google-cloud-spanner-jdbc</artifactId>
-                    <version>2.6.1</version>
+                    <version>2.9.9</version>
                 </dependency>
             </dependencies>
         </profile>
@@ -225,7 +225,7 @@
         <dependency>
             <groupId>org.glassfish.jaxb</groupId>
             <artifactId>jaxb-runtime</artifactId>
-            <version>4.0.0</version>
+            <version>4.0.2</version>
         </dependency>
 
         <dependency>
@@ -343,7 +343,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-dependency-plugin</artifactId>
-                <version>3.3.0</version>
+                <version>3.5.0</version>
                 <executions>
                     <execution>
                         <id>analyze</id>