Update Spring Security for CVE-2022-22978
https://spring.io/blog/2022/05/15/spring-security-5-7-0-5-6-4-5-5-7-released-fixes-cve-2022-22978-cve-2022-22976
At the time of writing, no actual vulnerability is known for Bitbucket, however customers have reported their scanning tools report the pre-fixed versions of Spring Security so at a minimum it should be updated to alleviate that concern.