update x-stream to 1.4.16 (from 1.4.15)

[sseide]

Description

security update for com.thoughtworks.xstream:xstream from 1.4.15 to 1.4.16

Motivation and Context

This update fixes the following CVE:

• CVE-2021-21341 (High)
• CVE-2021-21342 (Medium)
• CVE-2021-21343 (Medium)
• CVE-2021-21344 (Medium)
• CVE-2021-21345 (Medium)
• CVE-2021-21346 (Medium)
• CVE-2021-21347 (Medium)
• CVE-2021-21348 (Medium)
• CVE-2021-21349 (Medium)
• CVE-2021-21350 (Medium)
• CVE-2021-21351 (Medium)

How Has This Been Tested?

Tested with running gradlew test and within our own installation where this library was replaced.

Types of changes

• Bug fix (non-breaking change which fixes an issue)

Checklist:

• My code follows the code style of this project.
• I have updated the documentation accordingly.

[sseide]

Somehow unrelated question - the gradle build tools generate a new / updated checksum.xml.
Why does this file contains a reference to xerces:xercesImpl at version 2.9.1 AND 2.12.1? Dependency resolution shows version 2.12.1 only.
Thats the other change for that file after running gradle. It was not me...

[FSchumacher]

Somehow unrelated question - the gradle build tools generate a new / updated checksum.xml.
Why does this file contains a reference to xerces:xercesImpl at version 2.9.1 AND 2.12.1? Dependency resolution shows version 2.12.1 only.
Thats the other change for that file after running gradle. It was not me...

The 2.9.1 has been probably forgotten to be removed.

[FSchumacher]

Thanks for the PR.