Bump Junit for to avoid OWASP flag
<artifactId>javax.ws.rs-api</artifactId>
<version>2.0.1</version>
</dependency>
+ <dependency>
+ <!--
+ We use JUnit 5 in HAPI FHIR, but some libraries still pull in / require JUnit 4
+ (e.g. Testcontainers) so we enforce a current version to avoid OWASP flags
+ -->
+ <groupId>junit</groupId>
+ <artifactId>junit</artifactId>
+ <version>4.13.2</version>
+ </dependency>
<dependency>
<groupId>io.swagger</groupId>
<artifactId>swagger-annotations</artifactId>
