Bump Composition Analysis Analyzer versions for 15.0 release

Release notes

We are changing the default version of Java in Dependency Scanning to be 17 as that is the current Long Term Support (LTS) version. We still support the same versions (8,11,13,14,15,16,17) it is only which is enabled by default that is changing. If you need to change the default to one of the other supported versions set the DS_Java_Version variable.

https://docs.gitlab.com/ee/user/application_security/dependency_scanning/#configuring-specific-analyzers-used-by-dependency-scanning

goal

bump up all analyzer versions by one version just before the 15.0 release cutoff

no actual real changes other than tag needed

related changes

• [set python 3.9 as default in gemnasium-python analyzer]](#335013 (closed))

Implementation plan

• For each analyzer we should create an MR updating the changelog. Once merged we can create a new release (and the corresponding git tag).
  • https://gitlab.com/gitlab-org/security-products/analyzers/gemnasium
  • https://gitlab.com/gitlab-org/security-products/analyzers/gemnasium-python
  • https://gitlab.com/gitlab-org/security-products/analyzers/gemnasium-maven
  • https://gitlab.com/gitlab-org/security-products/analyzers/license-finder
• For each vendored template, update the image to point to the correct major version
  • https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Jobs/Dependency-Scanning.gitlab-ci.yml
  • https://gitlab.com/gitlab-org/gitlab/-/blob/master/lib/gitlab/ci/templates/Jobs/License-Scanning.gitlab-ci.yml

We are not bumping bundler-audit and retire.js because we are removing them from 15.0+