Combined dependency updates (2024-09-21)

Dependabot updates combined by [DashGit](https://javiertuya.github.io/dashgit). Includes:
- [Bump commons-io:commons-io from 2.16.1 to 2.17.0](#276)
- [Bump org.apache.httpcomponents.client5:httpclient5 from 5.3.1 to 5.4](#277)
- [Bump org.apache.maven.plugins:maven-gpg-plugin from 3.2.5 to 3.2.6](#278)

pom.xml

@@ -22,7 +22,7 @@
 
 		<portable.version>2.3.0</portable.version>
 
-		<httpclient-version>5.3.1</httpclient-version>
+		<httpclient-version>5.4</httpclient-version>
 
 		<!-- store-loader still using httpclient4 to call REST APIs, pending migration -->
 		<httpclient4-version>4.5.14</httpclient4-version>
@@ -140,7 +140,7 @@
 			<dependency>
 				<groupId>commons-io</groupId>
 				<artifactId>commons-io</artifactId>
-				<version>2.16.1</version>
+				<version>2.17.0</version>
 				<scope>test</scope>
 			</dependency>
 			<dependency>
@@ -373,7 +373,7 @@
 					<plugin>
 						<groupId>org.apache.maven.plugins</groupId>
 						<artifactId>maven-gpg-plugin</artifactId>
-						<version>3.2.5</version>
+						<version>3.2.6</version>
 						<executions>
 							<execution>
 								<id>sign-artifacts</id>