fix(java/pom): ignore unsupported requirements

[knqyf263]

Description

Trivy currently supports only the first two requirements in pom.xml. Other requirements should be skipped at the moment.

✅ 1.0: Soft requirement for 1.0
✅ [1.0]: Hard requirement for 1.0
❌ (,1.0]: Hard requirement for any version <= 1.0.
❌ [1.2,1.3]: Hard requirement for any version between 1.2 and 1.3 inclusive.
❌ [1.0,2.0): 1.0 <= x < 2.0; Hard requirement for any version between 1.0 inclusive and 2.0 exclusive.
❌ [1.5,): Hard requirement for any version greater than or equal to 1.5.
❌ (,1.0],[1.2,): Hard requirement for any version less than or equal to 1.0 than or greater than or equal to 1.2, but not 1.1. Multiple requirements are separated by commas.
❌ (,1.1),(1.1,): Hard requirement for any version except 1.1; for example because 1.1 has a critical vulnerability.

Example

        <dependency>
            <groupId>com.fasterxml.jackson.dataformat</groupId>
            <artifactId>jackson-dataformat-xml</artifactId>
            <version>(,2.8.0]</version>
        </dependency>

Blockers

• fix(java/pom): ignore unsupported requirements go-dep-parser#71
• fix(java/pom): ignore unsupported requirements fanal#351

References

• https://maven.apache.org/pom.html#Dependency_Version_Requirement_Specification