chore: [DevOps] bump the production-minor-patch group with 2 updates (#1219)

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

dependency-bundles/bom/pom.xml

@@ -55,7 +55,7 @@
 		<!-- XSUAA -->
 		<!-- Keep this version consistent with the one from the SAP Java Buildpack (after their 2.0 release) -->
 		<!-- see https://github.wdf.sap.corp/xs2-java/xs-java-buildpack/blob/master/resources/pom.xml -->
-		<scp-cf.xsuaa-client.version>4.0.7</scp-cf.xsuaa-client.version>
+		<scp-cf.xsuaa-client.version>4.0.8</scp-cf.xsuaa-client.version>
 		<java-jwt.version>4.5.2</java-jwt.version>
 		<!-- Utility stuff -->
 		<slf4j.version>2.0.18</slf4j.version>
@@ -279,7 +279,7 @@
 			<dependency>
 				<groupId>org.checkerframework</groupId>
 				<artifactId>checker-qual</artifactId>
-				<version>4.2.0</version>
+				<version>4.2.1</version>
 			</dependency>
 			<!--  2.10 by Caffeine and 2.11 by Guava  -->
 			<dependency>