Bump org.apache.poi:poi-ooxml from 5.1.0 to 5.4.0 in /tooling (#552)

* Bump org.apache.poi:poi-ooxml from 5.1.0 to 5.4.0 in /tooling

Bumps org.apache.poi:poi-ooxml from 5.1.0 to 5.4.0.

---
updated-dependencies:
- dependency-name: org.apache.poi:poi-ooxml
  dependency-version: 5.4.0
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>

* Add nested poi dependency to dependencyManagement to force correct version

---------

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Chris O Riordan <chris.oriordan@smilecdr.com>
Co-authored-by: Bryn Rhodes <brynrhodes@users.noreply.github.com>
Co-authored-by: c-schuler <hoofschu@gmail.com>

Author: 4 people

pom.xml

@@ -20,6 +20,7 @@
         <jetty.version>11.0.20</jetty.version>
         <error-prone.version>2.24.1</error-prone.version>
         <checkstyle.version>10.12.7</checkstyle.version>
+        <poi.version>5.4.0</poi.version>
     </properties>
 
     <name>CQF Tooling</name>

tooling/pom.xml

@@ -161,7 +161,7 @@
         <dependency>
             <groupId>org.apache.poi</groupId>
             <artifactId>poi-ooxml</artifactId>
-            <version>5.1.0</version>
+            <version>${poi.version}</version>
         </dependency>
 
         <!-- Narrative Generation -->
@@ -396,6 +396,12 @@
                 <artifactId>http2-hpack</artifactId>
                 <version>${jetty.version}</version>
             </dependency>
+            <!-- Define correct version for nested poi dependency -->
+            <dependency>
+                <groupId>org.apache.poi</groupId>
+                <artifactId>poi</artifactId>
+                <version>${poi.version}</version>
+            </dependency>
         </dependencies>
     </dependencyManagement>