Bump Junit for to avoid OWASP flag (hapifhir#2618)

Author: jamesagnew

pom.xml

@@ -1120,6 +1120,15 @@
 				<artifactId>javax.ws.rs-api</artifactId>
 				<version>2.0.1</version>
 			</dependency>
+			<dependency>
+				<!--
+				We use JUnit 5 in HAPI FHIR, but some libraries still pull in / require JUnit 4
+				(e.g. Testcontainers) so we enforce a current version to avoid OWASP flags
+				-->
+				<groupId>junit</groupId>
+				<artifactId>junit</artifactId>
+				<version>4.13.2</version>
+			</dependency>
 			<dependency>
 				<groupId>io.swagger</groupId>
 				<artifactId>swagger-annotations</artifactId>