Merge pull request #7210 from hapifhir/jd-20250822-mb-rel-8-4-final

final mergeback from rel-8-4

Author: jdar8

hapi-fhir-base/src/main/java/ca/uhn/fhir/util/VersionEnum.java

@@ -181,6 +181,7 @@ public enum VersionEnum {
 	V8_2_2,
 	V8_3_0,
 	V8_4_0,
+	V8_4_1,
 	V8_5_0,
 	V8_6_0;
 

pom.xml

@@ -1055,7 +1055,7 @@
 		<httpclient_version>4.5.14</httpclient_version>
 		<jackson_version>2.18.1</jackson_version>
 		<jackson_databind_version>2.18.1</jackson_databind_version>
-		<httpclient5_version>5.4.1</httpclient5_version>
+		<httpclient5_version>5.4.3</httpclient5_version>
 		<httpcore5_version>5.3.1</httpcore5_version>
 		<jackson_version>2.17.1</jackson_version>
 		<jackson_databind_version>2.17.1</jackson_databind_version>
@@ -1344,6 +1344,13 @@
 				<version>3.9.1</version>
 			</dependency>
 
+			<!-- Pinned here for CVE: CVE-2025-7962 This is used transitively in simplejavamail which has no fix yet -->
+			<dependency>
+				<groupId>org.eclipse.angus</groupId>
+				<artifactId>angus-mail</artifactId>
+				<version>2.0.4</version>
+			</dependency>
+
 			<!-- Architecture Test -->
 			<dependency>
 				<groupId>com.tngtech.archunit</groupId>