TIKA-4326: remove exclusions that are no longer needed

Author: THausherr

tika-parent/pom.xml

@@ -1125,17 +1125,6 @@
               <artifactId>jetty-http</artifactId>
               <version>11.0.24</version>
             </coordinate>
-            <coordinate>
-              <groupId>io.netty</groupId>
-              <artifactId>netty-handler</artifactId>
-              <version>${netty.version}</version>
-            </coordinate>
-            <!-- these are used by the nlp-module -->
-            <coordinate>
-              <groupId>org.apache.lucene</groupId>
-              <artifactId>lucene-queryparser</artifactId>
-              <version>4.0.0</version>
-            </coordinate>
             <!-- this one is used in tika-example -->
             <coordinate>
               <!-- sonatype: https://github.com/apache/commons-dbcp/commit/a4c5af0da1de3a7f50c72fc7edaa1f653ca276dd -->
@@ -1150,14 +1139,6 @@
               <artifactId>h2</artifactId>
               <version>${h2.version}</version>
             </coordinate>
-            <!-- CVE-2023-39913: Uima is used because ctakes is used in the
-            natural language process module. Serialization is only on data that is configured in
-            tika-config.xml. We don't think we'd be vulnerable to crafted user input. -->
-            <coordinate>
-              <groupId>org.apache.uima</groupId>
-              <artifactId>uimaj-core</artifactId>
-              <version>3.4.1</version>
-            </coordinate>
             <!-- provided dependency brought in by org.deeplearning4j:deeplearning4j-utility-iterators -->
             <coordinate>
               <groupId>org.threeten</groupId>
@@ -1171,11 +1152,6 @@
               <artifactId>threetenbp</artifactId>
               <version>1.7.0</version>
             </coordinate>
-            <coordinate>
-              <groupId>joda-time</groupId>
-              <artifactId>joda-time</artifactId>
-              <version>2.12.7</version>
-            </coordinate>
             <!-- while waiting for 1.14.4 to appear on maven central, see
                  https://www.hdfgroup.org/2024/05/new-hdf5-cve-issues-fixed-in-1-14-4/
             -->