chore: [DevOps] bump the production-minor-patch group with 3 updates (#763)

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

dependency-bundles/bom/pom.xml

@@ -54,7 +54,7 @@
 		<findbugs-jsr305.version>3.0.2</findbugs-jsr305.version>
 		<!-- @Nonnull/@Nullable annotations -->
 		<vavr.version>0.10.6</vavr.version>
-		<guava.version>33.4.0-jre</guava.version>
+		<guava.version>33.4.5-jre</guava.version>
 		<!-- collection utilities, @Beta annotation -->
 		<commons-io.version>2.18.0</commons-io.version>
 		<!-- Apache file utils -->
@@ -270,7 +270,7 @@
 			<dependency>
 				<groupId>com.google.errorprone</groupId>
 				<artifactId>error_prone_annotations</artifactId>
-				<version>2.36.0</version>
+				<version>2.37.0</version>
 			</dependency>
 		</dependencies>
 	</dependencyManagement>

pom.xml

@@ -94,7 +94,7 @@
 		<!-- Spring dependencies -->
 		<!-- Keep these versions consistent with the ones from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
-		<spring.version>6.2.4</spring.version>
+		<spring.version>6.2.5</spring.version>
 		<spring-security.version>6.1.5</spring-security.version>
 		<slf4j.version>2.0.17</slf4j.version>
 		<assertj-core.version>3.27.3</assertj-core.version>