Bump the java group in /java with 3 updates (#1040)

Bumps the java group in /java with 3 updates:
[org.apache.maven.plugins:maven-surefire-plugin](https://github.com/apache/maven-surefire),
commons-validator:commons-validator and
[io.grpc:grpc-bom](https://github.com/grpc/grpc-java).

Updates `org.apache.maven.plugins:maven-surefire-plugin` from 3.2.2 to
3.2.3
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/apache/maven-surefire/commit/ac9e574a9444cc825b09bae66f30155eb028da92"><code>ac9e574</code></a>
[maven-release-plugin] prepare release surefire-3.2.3</li>
<li><a
href="https://github.com/apache/maven-surefire/commit/2d6cbc63cb8f0dc34e3556e0c5a629129d2e7d91"><code>2d6cbc6</code></a>
[SUREFIRE-2220] SurefireForkChannel#getForkNodeConnectionString()
returns inv...</li>
<li><a
href="https://github.com/apache/maven-surefire/commit/05322d992778dd33e2f2e41661a2e66ef7539a68"><code>05322d9</code></a>
[SUREFIRE-2212] OutOfMemoryError raised when parsing files with huge
stderr/s...</li>
<li><a
href="https://github.com/apache/maven-surefire/commit/55ccd06a027f1693557c2a3ec3690ac91dcc59ba"><code>55ccd06</code></a>
[SUREFIRE-2211] additionalClasspathElement with UNC path not working
with Mav...</li>
<li><a
href="https://github.com/apache/maven-surefire/commit/aa864f4532282100667bf3d81dc7cbd460845408"><code>aa864f4</code></a>
[SUREFIRE-2216] Upgrade plugins and components (in ITs)</li>
<li><a
href="https://github.com/apache/maven-surefire/commit/6662e07f5957d0fa4d12dc3e331be8f93cf355f8"><code>6662e07</code></a>
[SUREFIRE-2215] Upgrade to Parent 41</li>
<li><a
href="https://github.com/apache/maven-surefire/commit/f5b73ab3d18baa4baf244b2526d854574e51f87e"><code>f5b73ab</code></a>
[SUREFIRE-2214] Uprade to HtmlUnit 3.8.0</li>
<li><a
href="https://github.com/apache/maven-surefire/commit/47c5816ae6d3e596d13a3253e214939f3a479b1f"><code>47c5816</code></a>
[SUREFIRE-2210] - Restore ordering of additional class path
elements</li>
<li><a
href="https://github.com/apache/maven-surefire/commit/9b7ecf141f4686c094219038272c28fecccffa30"><code>9b7ecf1</code></a>
[maven-release-plugin] prepare for next development iteration</li>
<li>See full diff in <a
href="https://github.com/apache/maven-surefire/compare/surefire-3.2.2...surefire-3.2.3">compare
view</a></li>
</ul>
</details>
<br />

Updates `commons-validator:commons-validator` from 1.7 to 1.8.0

Updates `io.grpc:grpc-bom` from 1.59.1 to 1.60.0
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/grpc/grpc-java/releases">io.grpc:grpc-bom's
releases</a>.</em></p>
<blockquote>
<h2>v1.60.0</h2>
<h3>API Changes</h3>
<ul>
<li>api: Stabilize <code>ForwardingServerBuilder</code>,
<code>ForwardingChannelBuilder2</code>, and
<code>ForwardingChannelBuilder</code>. Note that
<code>ForwardingChannelBuilder</code> is stabilized (no changes will be
made to it), but immediately deprecated in favor of
<code>ForwardingChannelBuilder2</code>. (<a
href="https://redirect.github.com/grpc/grpc-java/issues/10586">#10586</a>)</li>
<li>api: Deprecate <code>ForwardingChannelBuilder.delegate()</code>. De
facto this deprecates the class itself, since all classes extending
<code>ForwardingChannelBuilder</code> implement the
<code>delegate()</code> method. See javadoc for details (<a
href="https://redirect.github.com/grpc/grpc-java/issues/10587">#10587</a>)</li>
<li>api: Changed recently-introduced
<code>LoadBalancer.acceptResolvedAddresses()</code> to return
<code>Status</code> instead of <code>boolean</code> (<a
href="https://redirect.github.com/grpc/grpc-java/issues/10636">#10636</a>).
This is part of continued work to align the LB API cross-language and
API stabilization</li>
<li>stub: Deprecate StreamObservers (<a
href="https://redirect.github.com/grpc/grpc-java/issues/10654">#10654</a>)</li>
<li>alts: AltsChannelBuilder now extends
<code>ForwardingChannelBuilder2</code> (<a
href="https://redirect.github.com/grpc/grpc-java/issues/10587">#10587</a>)</li>
<li>protobuf: Stabilize <code>ProtoUtils.metadataMarshaller()</code> (<a
href="https://redirect.github.com/grpc/grpc-java/issues/10628">#10628</a>)</li>
<li>protobuf-lite: ProtoLiteUtils experimental comment (<a
href="https://redirect.github.com/grpc/grpc-java/issues/10627">#10627</a>)</li>
</ul>
<h3>Behavior Changes</h3>
<ul>
<li>core: <code>ManagedChannel</code>s now check the address types
provided by the nameResolver (for the given target) with the address
types supported by the channel transport and generate an error in case
of mismatch. That dramatically improves the error message when an issue
occurs</li>
<li>core: When a server stream is closed due to user's code (an uncaught
exception in halfClosed, messagesAvailable, onReady callback of a
ServerStream's listener), the <code>Status.UNKNOWN</code> returned to
the client will have <code>Application error processing RPC</code>
description. Previously the description was empty. This is helpful to
differentiate between server errors originated in user application, gRPC
library, or even those injected by a proxy. (<a
href="https://redirect.github.com/grpc/grpc-java/issues/10643">#10643</a>)</li>
<li>xds: Log ORCA UNIMPLEMENTED error to subchannel logger. This removes
them from the normal application logs, reducing log spam</li>
</ul>
<h3>Improvements</h3>
<ul>
<li>Change the underlying implementations of RingHash, RoundRobin,
WeightedRoundRobin and LeastRequest load balancers to utilize the pick
first load balancer rather than directly manage subchannels. This should
only be noticeable if it introduced a bug</li>
<li>core: Avoid flushing headers when the server returns a single
response (<a
href="https://redirect.github.com/grpc/grpc-java/issues/9314">#9314</a>).
This is a performance optimization to reduce the number of packets for
non-streaming responses</li>
<li>util: Make grpc-core an implementation dependency. This will prevent
the io.grpc.internal classes in grpc-core from being visible during
compilation when depending on just grpc-util</li>
<li>netty: Implement <code>Http2Headers.isEmpty()</code>. This fixes
compatibility with Netty 4.1.101.Final.</li>
<li>netty: Add <code>NettyServerBuilder.maxRstFramesPerWindow()</code>.
This can be used to limit impact of Rapid Reset</li>
<li>netty: Disable huffman coding in headers (<a
href="https://redirect.github.com/grpc/grpc-java/issues/10563">#10563</a>).
Huffman coding provides modest compression for relatively high CPU
usage, especially within a data center. Rely just on the HPACK static
and dynamic tables for compression, for higher performance. This only
impacts header values 512 bytes or longer, as Netty already disabled
Huffman for smaller values</li>
<li>alts: Improve handshake failure error message by propagating
original exception (<a
href="https://redirect.github.com/grpc/grpc-java/issues/10644">#10644</a>)</li>
</ul>
<h3>Bug Fixes</h3>
<ul>
<li>util: Remove shutdown subchannels from OD tracking (<a
href="https://redirect.github.com/grpc/grpc-java/issues/10683">#10683</a>).
This could have caused a memory leak on a long-lived channel. But we
don’t think it could be triggered with our built-in load balancing
policies.</li>
</ul>
<h3>Dependencies</h3>
<ul>
<li>Bump Netty to 4.1.100.Final</li>
</ul>
<h3>Acknowledgements</h3>
<p><a
href="https://github.com/anthonyjpratti"><code>@​anthonyjpratti</code></a>
<a href="https://github.com/fedorka"><code>@​fedorka</code></a>
<a href="https://github.com/jpd236"><code>@​jpd236</code></a>
<a href="https://github.com/mateusazis"><code>@​mateusazis</code></a>
<a href="https://github.com/pkoenig10"><code>@​pkoenig10</code></a>
<a
href="https://github.com/yannickepstein"><code>@​yannickepstein</code></a>
<a
href="https://github.com/amirhadadi"><code>@​amirhadadi</code></a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/grpc/grpc-java/commit/eb8b1d8379008ab89cade89392d265bed90a2692"><code>eb8b1d8</code></a>
Bump version to 1.60.0</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/5b1bb8cd859b5097c789e9e209edc6b7a97a88b0"><code>5b1bb8c</code></a>
Update README etc to reference 1.60.0</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/9400613fde680f864e9093e108b15f37bd19b0b1"><code>9400613</code></a>
all: Add grpc-inprocess</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/69114bfb475fe2d9a0c1da1c0a397daccb75c2e2"><code>69114bf</code></a>
inprocess: Add missing anonymous address as supported</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/24b3ca1ccb53667f85262b235cdb723dca088d03"><code>24b3ca1</code></a>
core: Detect NameResolverProviders passed as Factories</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/6c55cd00226eda4ed186937592c3e51532af4031"><code>6c55cd0</code></a>
util: Remove shutdown subchannels from OD tracking (<a
href="https://redirect.github.com/grpc/grpc-java/issues/10683">#10683</a>)</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/43e98d07a1f2885aa87f97ae277b4582403f1882"><code>43e98d0</code></a>
netty: Add option to limit RST_STREAM rate</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/2b65e660c0bcf7043b0f83d27eb42d135661eaf7"><code>2b65e66</code></a>
netty: disable huffman coding in headers (<a
href="https://redirect.github.com/grpc/grpc-java/issues/10563">#10563</a>)</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/90e76a1b4a42eb07a71a55cdc7ccc4303c5aa032"><code>90e76a1</code></a>
Implement Http2Headers.isEmpty (<a
href="https://redirect.github.com/grpc/grpc-java/issues/10663">#10663</a>)</li>
<li><a
href="https://github.com/grpc/grpc-java/commit/0299788807bcd434109d4924a63949cf44781e3a"><code>0299788</code></a>
util: Make grpc-core an implementation dependency</li>
<li>Additional commits viewable in <a
href="https://github.com/grpc/grpc-java/compare/v1.59.1...v1.60.0">compare
view</a></li>
</ul>
</details>
<br />


Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore <dependency name> major version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's major version (unless you unignore this specific
dependency's major version or upgrade to it yourself)
- `@dependabot ignore <dependency name> minor version` will close this
group update PR and stop Dependabot creating any more for the specific
dependency's minor version (unless you unignore this specific
dependency's minor version or upgrade to it yourself)
- `@dependabot ignore <dependency name>` will close this group update PR
and stop Dependabot creating any more for the specific dependency
(unless you unignore this specific dependency or upgrade to it yourself)
- `@dependabot unignore <dependency name>` will remove all of the ignore
conditions of the specified dependency
- `@dependabot unignore <dependency name> <ignore condition>` will
remove the ignore condition of the specified dependency and ignore
conditions


</details>

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

java/pom.xml

@@ -43,8 +43,8 @@
         <protobuf.maven.plugin.version>0.6.1</protobuf.maven.plugin.version>
 
         <re2j.version>1.7</re2j.version>
-        <commons.validator.version>1.7</commons.validator.version>
-        <grpc.version>1.59.1</grpc.version>
+        <commons.validator.version>1.8.0</commons.validator.version>
+        <grpc.version>1.60.0</grpc.version>
         <junit.version>4.13.2</junit.version>
         <assertj.version>3.24.2</assertj.version>
         <java.release>8</java.release>
@@ -84,7 +84,7 @@
             <plugin>
                 <groupId>org.apache.maven.plugins</groupId>
                 <artifactId>maven-surefire-plugin</artifactId>
-                <version>3.2.2</version>
+                <version>3.2.3</version>
                 <configuration>
                     <useSystemClassLoader>false</useSystemClassLoader>
                 </configuration>