Add constraints on spring-boot-starter-undertow dependency to use xnio-api 3.8.16.Final instead of 3.8.8.Final (CVE-2023-5685)

Author: jreynard-code

build.gradle.kts

@@ -278,7 +278,9 @@ subprojects {
     implementation("org.springframework.boot:spring-boot-starter-web") {
       exclude(group = "org.springframework.boot", module = "spring-boot-starter-tomcat")
     }
-    implementation("org.springframework.boot:spring-boot-starter-undertow")
+    implementation("org.springframework.boot:spring-boot-starter-undertow") {
+      constraints { implementation("org.jboss.xnio:xnio-api:3.8.16.Final") }
+    }
     implementation("com.fasterxml.jackson.module:jackson-module-kotlin")
     // https://mvnrepository.com/artifact/jakarta.validation/jakarta.validation-api
     implementation("jakarta.validation:jakarta.validation-api:$apiValidationVersion")