build(deps): batch open Dependabot version updates

[rzo1]

Collects the currently open, green Dependabot version updates into a single branch so the full suite runs once over the combined set instead of once per PR.

Maven

Dependency	From	To	PR
activemq.version	6.3.0	6.3.1	#9024
byte-buddy.version	1.18.11	1.18.12	#9018
com.puppycrawl.tools:checkstyle	13.9.0	14.0.0	#9039
com.fasterxml.jackson:jackson-bom	2.22.1	2.22.2	#9032
com.fasterxml.jackson.core:jackson-databind	2.22.1	2.22.2	#9026
com.fasterxml.woodstox:woodstox-core	7.2.1	7.2.2	#9028
com.github.luben:zstd-jni	1.5.7-12	1.5.7-15	#9034
io.netty:netty-bom	4.2.16.Final	4.2.17.Final	#9022
jetty.version	12.1.11	12.1.12	#9019
metrics.version	4.2.39	4.2.40	#9021
netty-tcnative.version	2.0.81.Final	2.0.82.Final	#9027
org.apache.avro:avro	1.12.1	1.12.2	#9020
org.apache.commons:commons-collections4	4.5.0	4.6.0	#9030
org.apache.xbean:xbean-spring	4.31	5.0.0	#9038
org.jctools:jctools-core	4.0.6	4.0.7	#9023
org.junit:junit-bom	6.1.2	6.1.3	#9031
org.objenesis:objenesis	3.5	3.6	#9025
redis.clients:jedis	7.5.3	8.0.1	#9033
spring.version	7.0.8	7.0.9	#9029

npm (storm-webapp)

Dependency	From	To	PR
cytoscape	3.34.0	3.34.2	#9063
cytoscape-dagre	4.0.0	4.0.1	#9058
datatables.net	3.0.0	3.0.2	#9060
datatables.net-bs5	3.0.0	3.0.2	#9057
datatables.net-dt	3.0.0	3.0.2	#9055
js-yaml	5.2.2	5.4.1	#9059
vis-data	8.0.4	8.0.5	#9061
vis-network	10.1.0	10.1.2	#9056
css-loader (dev)	7.1.4	7.1.5	#9065
cypress (dev)	15.19.0	15.21.1	#9054
start-server-and-test (dev)	3.0.11	3.0.12	#9066
webpack (dev)	5.109.2	5.110.1	#9062
webpack-cli (dev)	7.2.2	7.2.3	#9064

Not included

• Guava 33.6.0-jre → 33.7.1-jre (build(deps): bump com.google.guava:guava from 33.6.0-jre to 33.7.1-jre #9036, build(deps): bump com.google.guava:guava from 33.6.0-jre to 33.7.1-jre in /examples #9052) — fails dedup-libs in the binary distribution: Guava 33.7.1 pulls in jspecify 1.0.1 while the daemon classpath still resolves jspecify 1.0.0, and the packaging step refuses to assemble shadowed jars. Needs jspecify aligned first, so it is kept out of this branch.

Notes

• The /examples Dependabot PRs (build(deps): bump jetty.version from 12.1.11 to 12.1.12 in /examples #9035, build(deps): bump org.jctools:jctools-core from 4.0.6 to 4.0.7 in /examples #9037, build(deps): bump metrics.version from 4.2.39 to 4.2.40 in /examples #9040–build(deps): bump org.junit:junit-bom from 6.1.2 to 6.1.3 in /examples #9051, build(deps): bump org.apache.xbean:xbean-spring from 4.31 to 5.0.0 in /examples #9053) target the same properties in the root pom.xml as their counterparts above, so they are already covered here and can be closed once this lands.
• The datatables.net* lockfile entries were merged by hand: with datatables.net, -dt and -bs5 all at 3.0.2 the nested node_modules/datatables.net*/node_modules/datatables.net copies are redundant and were dropped, leaving a single hoisted 3.0.2 entry.
• The build failure originally reported on build(deps): bump datatables.net-bs5 from 3.0.0 to 3.0.2 in /storm-webapp #9057 was a Maven Central 502 while resolving junit-jupiter-engine, not a real breakage.