Added org.apache.poi.ooxml 4.1.1 and xmlsec 2.2.0

Also updated commons-codec to 1.14 as it's needed for this.

Signed-off-by: Sina Madani <sinadoom@googlemail.com>

Change-Id: Ie03709c26d9c74f4a0903a75cae11b4b68ea1e88
diff --git a/apache/org.apache.commons.codec_1.13.0/.project b/apache/org.apache.commons.codec_1.14.0/.project
similarity index 91%
rename from apache/org.apache.commons.codec_1.13.0/.project
rename to apache/org.apache.commons.codec_1.14.0/.project
index 2578b23..d18ee2d 100644
--- a/apache/org.apache.commons.codec_1.13.0/.project
+++ b/apache/org.apache.commons.codec_1.14.0/.project
@@ -1,6 +1,6 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <projectDescription>
-	<name>org.apache.commons.codec_1.13.0</name>
+	<name>org.apache.commons.codec_1.14.0</name>
 	<comment></comment>
 	<projects>
 	</projects>
diff --git a/apache/org.apache.commons.codec_1.13.0/osgi.bnd b/apache/org.apache.commons.codec_1.14.0/osgi.bnd
similarity index 99%
rename from apache/org.apache.commons.codec_1.13.0/osgi.bnd
rename to apache/org.apache.commons.codec_1.14.0/osgi.bnd
index e45d4ce..3accbd5 100644
--- a/apache/org.apache.commons.codec_1.13.0/osgi.bnd
+++ b/apache/org.apache.commons.codec_1.14.0/osgi.bnd
@@ -8,4 +8,3 @@
 
 Import-Package: \
  *;resolution:=optional
-
diff --git a/apache/org.apache.commons.codec_1.13.0/pom.xml b/apache/org.apache.commons.codec_1.14.0/pom.xml
similarity index 91%
rename from apache/org.apache.commons.codec_1.13.0/pom.xml
rename to apache/org.apache.commons.codec_1.14.0/pom.xml
index b70b26e..c343439 100644
--- a/apache/org.apache.commons.codec_1.13.0/pom.xml
+++ b/apache/org.apache.commons.codec_1.14.0/pom.xml
@@ -8,14 +8,14 @@
     <version>1.0.0-SNAPSHOT</version>
   </parent>
   <artifactId>org.apache.commons.codec</artifactId>
-  <version>1.13.0-SNAPSHOT</version>
+  <version>1.14.0-SNAPSHOT</version>
   <packaging>eclipse-bundle-recipe</packaging>
   <name>Apache Commons Codec</name>
   <dependencies>
     <dependency>
       <groupId>commons-codec</groupId>
       <artifactId>commons-codec</artifactId>
-      <version>1.13</version>
+      <version>1.14</version>
     </dependency>
   </dependencies>
 </project>
diff --git a/apache/org.apache.commons.codec_1.13.0/src/eclipse/ip_log.xml b/apache/org.apache.commons.codec_1.14.0/src/eclipse/ip_log.xml
similarity index 62%
rename from apache/org.apache.commons.codec_1.13.0/src/eclipse/ip_log.xml
rename to apache/org.apache.commons.codec_1.14.0/src/eclipse/ip_log.xml
index 6ffd7fa..7fce1ca 100644
--- a/apache/org.apache.commons.codec_1.13.0/src/eclipse/ip_log.xml
+++ b/apache/org.apache.commons.codec_1.14.0/src/eclipse/ip_log.xml
@@ -1,23 +1,22 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <ip_log version="1.0">
-  <project id="org.apache.commons.codec" version="1.13.0" status="done">
+  <project id="org.apache.commons.codec" version="1.14.0" status="done">
     <info>
       <name>Apache Commons Codec</name>
       <repository>scm:git:git.eclipse.org:/gitroot/orbit/recipes.git</repository>
       <location>apache-parent/org.apache.commons.codec</location>
     </info>
     <contact>
-      <name>Matthias Sohn</name>
-      <email>matthias.sohn@sap.com</email>
-      <company>SAP SE</company>
+      <name>Sina Madani</name>
+      <email>sinadoom@googlemail.com</email>
     </contact>
     <legal>
-      <ipzilla bug_id="21199"/>
+      <clearlydefined url="https://clearlydefined.io/definitions/maven/mavencentral/commons-codec/commons-codec/1.14"/>
       <license>
         <name>Apache License, 2.0</name>
         <reference>http://www.apache.org/licenses/LICENSE-2.0.txt</reference>
       </license>
-      <package>commons-codec-1.13.jar</package>
+      <package>commons-codec-1.14.jar</package>
     </legal>
   </project>
 </ip_log>
diff --git a/apache/org.apache.commons.codec_1.13.0/src/main/resources/OSGI-INF/l10n/bundle.properties b/apache/org.apache.commons.codec_1.14.0/src/main/resources/OSGI-INF/l10n/bundle.properties
similarity index 100%
rename from apache/org.apache.commons.codec_1.13.0/src/main/resources/OSGI-INF/l10n/bundle.properties
rename to apache/org.apache.commons.codec_1.14.0/src/main/resources/OSGI-INF/l10n/bundle.properties
diff --git a/apache/org.apache.commons.codec_1.13.0/src/main/resources/about.html b/apache/org.apache.commons.codec_1.14.0/src/main/resources/about.html
similarity index 100%
rename from apache/org.apache.commons.codec_1.13.0/src/main/resources/about.html
rename to apache/org.apache.commons.codec_1.14.0/src/main/resources/about.html
diff --git a/apache/org.apache.commons.codec_1.13.0/src/main/resources/about_files/THE_APACHE_SOFTWARE_LICENSE__VERSION_2.0.txt b/apache/org.apache.commons.codec_1.14.0/src/main/resources/about_files/THE_APACHE_SOFTWARE_LICENSE__VERSION_2.0.txt
similarity index 100%
rename from apache/org.apache.commons.codec_1.13.0/src/main/resources/about_files/THE_APACHE_SOFTWARE_LICENSE__VERSION_2.0.txt
rename to apache/org.apache.commons.codec_1.14.0/src/main/resources/about_files/THE_APACHE_SOFTWARE_LICENSE__VERSION_2.0.txt
diff --git a/apache/org.apache.poi.ooxml_4.1.1/.project b/apache/org.apache.poi.ooxml_4.1.1/.project
new file mode 100644
index 0000000..e091603
--- /dev/null
+++ b/apache/org.apache.poi.ooxml_4.1.1/.project
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<projectDescription>
+	<name>org.apache.poi.ooxml_4.1.1</name>
+	<comment></comment>
+	<projects>
+	</projects>
+	<buildSpec>
+	</buildSpec>
+	<natures>
+	</natures>
+</projectDescription>
diff --git a/apache/org.apache.poi.ooxml_4.1.1/osgi.bnd b/apache/org.apache.poi.ooxml_4.1.1/osgi.bnd
new file mode 100644
index 0000000..f51ff28
--- /dev/null
+++ b/apache/org.apache.poi.ooxml_4.1.1/osgi.bnd
@@ -0,0 +1,14 @@
+package-version=${version;===;${Bundle-Version}}
+poi-version-range=${range;[===,+);4.1.1}poi-version=${version;===;4.1.1}
+poi-ooxml-schemas-version-range=${range;[===,+);4.1.1}poi-ooxml-schemas-version=${version;===;4.1.1}
+commons-compress-version-range=${range;[===,+);1.19}commons-compress-version=${version;===;1.19}
+curvesapi-version-range=${range;[===,+);1.06}curvesapi-version=${version;===;1.06}
+
+Export-Package: \
+ !about.html,!about_files, \
+ *.implementation.*;x-internal:=true;version="${package-version}", \
+ *.impl.*;x-internal:=true;version="${package-version}", \
+ *;version="${package-version}"
+
+Import-Package: \
+ *;resolution:=optional
diff --git a/apache/org.apache.commons.codec_1.13.0/pom.xml b/apache/org.apache.poi.ooxml_4.1.1/pom.xml
similarity index 70%
copy from apache/org.apache.commons.codec_1.13.0/pom.xml
copy to apache/org.apache.poi.ooxml_4.1.1/pom.xml
index b70b26e..552bd70 100644
--- a/apache/org.apache.commons.codec_1.13.0/pom.xml
+++ b/apache/org.apache.poi.ooxml_4.1.1/pom.xml
@@ -7,15 +7,15 @@
     <artifactId>apache-parent</artifactId>
     <version>1.0.0-SNAPSHOT</version>
   </parent>
-  <artifactId>org.apache.commons.codec</artifactId>
-  <version>1.13.0-SNAPSHOT</version>
+  <artifactId>org.apache.poi.ooxml</artifactId>
+  <version>4.1.1-SNAPSHOT</version>
   <packaging>eclipse-bundle-recipe</packaging>
-  <name>Apache Commons Codec</name>
+  <name>Apache POI</name>
   <dependencies>
     <dependency>
-      <groupId>commons-codec</groupId>
-      <artifactId>commons-codec</artifactId>
-      <version>1.13</version>
+      <groupId>org.apache.poi</groupId>
+      <artifactId>poi-ooxml</artifactId>
+      <version>4.1.1</version>
     </dependency>
   </dependencies>
 </project>
diff --git a/apache/org.apache.poi.ooxml_4.1.1/src/eclipse/ip_log.xml b/apache/org.apache.poi.ooxml_4.1.1/src/eclipse/ip_log.xml
new file mode 100644
index 0000000..377e3f6
--- /dev/null
+++ b/apache/org.apache.poi.ooxml_4.1.1/src/eclipse/ip_log.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<ip_log version="1.0">
+  <project id="org.apache.poi.ooxml" version="4.1.1" status="done">
+    <info>
+      <name>Apache POI</name>
+      <repository>scm:git:git.eclipse.org:/gitroot/orbit/recipes.git</repository>
+      <location>apache-parent/org.apache.poi.ooxml</location>
+    </info>
+    <contact>
+      <name>Sina Madani</name>
+      <email>sinadoom@googlemail.com</email>
+    </contact>
+    <legal>
+      <clearlydefined url="https://clearlydefined.io/definitions/maven/mavencentral/org.apache.poi/poi-ooxml/4.1.1"/>
+      <license>
+        <name>Apache License, 2.0</name>
+        <reference>http://www.apache.org/licenses/LICENSE-2.0.txt</reference>
+      </license>
+      <package>poi-ooxml-4.1.1.jar</package>
+    </legal>
+  </project>
+</ip_log>
\ No newline at end of file
diff --git a/apache/org.apache.poi.ooxml_4.1.1/src/main/resources/OSGI-INF/l10n/bundle.properties b/apache/org.apache.poi.ooxml_4.1.1/src/main/resources/OSGI-INF/l10n/bundle.properties
new file mode 100644
index 0000000..53c222d
--- /dev/null
+++ b/apache/org.apache.poi.ooxml_4.1.1/src/main/resources/OSGI-INF/l10n/bundle.properties
@@ -0,0 +1,3 @@
+# Bundle Localization
+bundleName = Apache POI
+bundleVendor = Eclipse Orbit
diff --git a/apache/org.apache.poi.ooxml_4.1.1/src/main/resources/about.html b/apache/org.apache.poi.ooxml_4.1.1/src/main/resources/about.html
new file mode 100644
index 0000000..9cfafc4
--- /dev/null
+++ b/apache/org.apache.poi.ooxml_4.1.1/src/main/resources/about.html
@@ -0,0 +1,43 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"/>
+<title>About</title>
+</head>
+<body lang="EN-US">
+<h2>About This Content</h2>
+
+<p>August 18, 2020</p>
+<h3>License</h3>
+
+<p>The Eclipse Foundation makes available all content in this plug-in (&quot;Content&quot;).  Unless otherwise
+indicated below, the Content is provided to you under the terms and conditions of the
+Eclipse Public License Version 2.0 (&quot;EPL&quot;).  A copy of the EPL is available
+at <a href="http://www.eclipse.org/legal/epl-2.0">http://www.eclipse.org/legal/epl-2.0</a>.
+For purposes of the EPL, &quot;Program&quot; will mean the Content.</p>
+
+<p>If you did not receive this Content directly from the Eclipse Foundation, the Content is
+being redistributed by another party (&quot;Redistributor&quot;) and different terms and conditions may
+apply to your use of any object code in the Content.  Check the Redistributor's license that was
+provided with the Content.  If no such license exists, contact the Redistributor.  Unless otherwise
+indicated below, the terms and conditions of the EPL still apply to any source code in the Content
+and such source code may be obtained at <a href="http://www.eclipse.org/">http://www.eclipse.org</a>.</p>
+
+<h3>Third Party Content</h3>
+<p>The Content includes items that have been sourced from third parties as set out below. If you
+did not receive this Content directly from the Eclipse Foundation, the following is provided
+for informational purposes only, and you should look to the Redistributor's license for
+terms and conditions of use.</p>
+
+<h4>Apache POI</h4>
+
+<p>The plug-in includes software developed by <a href="http://www.apache.org/" target="_blank">Apache Software Foundation</a> as part of the Apache POI project.</p>
+
+<p>Apache POI is provided to you under the terms and conditions of the <a href="http://www.apache.org/licenses/LICENSE-2.0.txt" target="_blank">Apache License, Version 2.0</a> (<a href="about_files/APACHE_LICENSE__VERSION_2.0.txt" target="_blank">APACHE_LICENSE__VERSION_2.0.txt</a>) license.</p>
+
+<p>Apache POI including its source is available from <a href="http://poi.apache.org/" target="_blank">poi.apache.org/</a>. The following mailing lists can be used to communicate with the project communities: POI Users List (<a href="http://mail-archives.apache.org/mod_mbox/poi-user/" target="_blank">archive</a>) or POI Developer List (<a href="http://mail-archives.apache.org/mod_mbox/poi-dev/" target="_blank">archive</a>).</p>
+
+
+</body>
+</html>
diff --git a/apache/org.apache.commons.codec_1.13.0/src/main/resources/about_files/THE_APACHE_SOFTWARE_LICENSE__VERSION_2.0.txt b/apache/org.apache.poi.ooxml_4.1.1/src/main/resources/about_files/APACHE_LICENSE__VERSION_2.0.txt
similarity index 100%
copy from apache/org.apache.commons.codec_1.13.0/src/main/resources/about_files/THE_APACHE_SOFTWARE_LICENSE__VERSION_2.0.txt
copy to apache/org.apache.poi.ooxml_4.1.1/src/main/resources/about_files/APACHE_LICENSE__VERSION_2.0.txt
diff --git a/apache/org.apache.santuario.xmlsec_2.2.0/.project b/apache/org.apache.santuario.xmlsec_2.2.0/.project
new file mode 100644
index 0000000..5a96bc5
--- /dev/null
+++ b/apache/org.apache.santuario.xmlsec_2.2.0/.project
@@ -0,0 +1,11 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<projectDescription>
+	<name>org.apache.santuario.xmlsec_2.2.0</name>
+	<comment></comment>
+	<projects>
+	</projects>
+	<buildSpec>
+	</buildSpec>
+	<natures>
+	</natures>
+</projectDescription>
diff --git a/apache/org.apache.santuario.xmlsec_2.2.0/osgi.bnd b/apache/org.apache.santuario.xmlsec_2.2.0/osgi.bnd
new file mode 100644
index 0000000..28b6a21
--- /dev/null
+++ b/apache/org.apache.santuario.xmlsec_2.2.0/osgi.bnd
@@ -0,0 +1,15 @@
+package-version=${version;===;${Bundle-Version}}
+slf4j-api-version-range=${range;[===,+);1.7.29}slf4j-api-version=${version;===;1.7.29}
+commons-codec-version-range=${range;[===,+);1.14}commons-codec-version=${version;===;1.14}
+xalan-version-range=${range;[===,+);2.7.2}xalan-version=${version;===;2.7.2}
+xercesImpl-version-range=${range;[===,+);2.12.0}xercesImpl-version=${version;===;2.12.0}
+xml-apis-version-range=${range;[===,+);1.4.01}xml-apis-version=${version;===;1.4.01}
+
+Export-Package: \
+ !about.html,!about_files, \
+ *.implementation.*;x-internal:=true;version="${package-version}", \
+ *.impl.*;x-internal:=true;version="${package-version}", \
+ *;version="${package-version}"
+
+Import-Package: \
+ *
diff --git a/apache/org.apache.commons.codec_1.13.0/pom.xml b/apache/org.apache.santuario.xmlsec_2.2.0/pom.xml
similarity index 69%
copy from apache/org.apache.commons.codec_1.13.0/pom.xml
copy to apache/org.apache.santuario.xmlsec_2.2.0/pom.xml
index b70b26e..9c7ad76 100644
--- a/apache/org.apache.commons.codec_1.13.0/pom.xml
+++ b/apache/org.apache.santuario.xmlsec_2.2.0/pom.xml
@@ -7,15 +7,15 @@
     <artifactId>apache-parent</artifactId>
     <version>1.0.0-SNAPSHOT</version>
   </parent>
-  <artifactId>org.apache.commons.codec</artifactId>
-  <version>1.13.0-SNAPSHOT</version>
+  <artifactId>org.apache.santuario.xmlsec</artifactId>
+  <version>2.2.0-SNAPSHOT</version>
   <packaging>eclipse-bundle-recipe</packaging>
-  <name>Apache Commons Codec</name>
+  <name>Apache XML Security for Java</name>
   <dependencies>
     <dependency>
-      <groupId>commons-codec</groupId>
-      <artifactId>commons-codec</artifactId>
-      <version>1.13</version>
+      <groupId>org.apache.santuario</groupId>
+      <artifactId>xmlsec</artifactId>
+      <version>2.2.0</version>
     </dependency>
   </dependencies>
 </project>
diff --git a/apache/org.apache.santuario.xmlsec_2.2.0/src/eclipse/ip_log.xml b/apache/org.apache.santuario.xmlsec_2.2.0/src/eclipse/ip_log.xml
new file mode 100644
index 0000000..cdfb90b
--- /dev/null
+++ b/apache/org.apache.santuario.xmlsec_2.2.0/src/eclipse/ip_log.xml
@@ -0,0 +1,22 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<ip_log version="1.0">
+  <project id="org.apache.santuario.xmlsec" version="2.2.0" status="done">
+    <info>
+      <name>Apache XML Security for Java</name>
+      <repository>scm:git:git.eclipse.org:/gitroot/orbit/recipes.git</repository>
+      <location>apache-parent/org.apache.santuario.xmlsec</location>
+    </info>
+    <contact>
+      <name>Sina Madani</name>
+      <email>sinadoom@googlemail.com</email>
+    </contact>
+    <legal>
+      <clearlydefined url="https://clearlydefined.io/definitions/maven/mavencentral/org.apache.santuario/xmlsec/2.2.0"/>
+      <license>
+        <name>Apache License, 2.0</name>
+        <reference>http://www.apache.org/licenses/LICENSE-2.0.txt</reference>
+      </license>
+      <package>xmlsec-2.2.0.jar</package>
+    </legal>
+  </project>
+</ip_log>
\ No newline at end of file
diff --git a/apache/org.apache.santuario.xmlsec_2.2.0/src/main/resources/OSGI-INF/l10n/bundle.properties b/apache/org.apache.santuario.xmlsec_2.2.0/src/main/resources/OSGI-INF/l10n/bundle.properties
new file mode 100644
index 0000000..6150447
--- /dev/null
+++ b/apache/org.apache.santuario.xmlsec_2.2.0/src/main/resources/OSGI-INF/l10n/bundle.properties
@@ -0,0 +1,3 @@
+# Bundle Localization
+bundleName = Apache XML Security for Java
+bundleVendor = Eclipse Orbit
diff --git a/apache/org.apache.santuario.xmlsec_2.2.0/src/main/resources/about.html b/apache/org.apache.santuario.xmlsec_2.2.0/src/main/resources/about.html
new file mode 100644
index 0000000..4441bed
--- /dev/null
+++ b/apache/org.apache.santuario.xmlsec_2.2.0/src/main/resources/about.html
@@ -0,0 +1,43 @@
+<!DOCTYPE html PUBLIC "-//W3C//DTD XHTML 1.0 Strict//EN"
+    "http://www.w3.org/TR/xhtml1/DTD/xhtml1-strict.dtd">
+<html xmlns="http://www.w3.org/1999/xhtml">
+<head>
+<meta http-equiv="Content-Type" content="text/html; charset=ISO-8859-1"/>
+<title>About</title>
+</head>
+<body lang="EN-US">
+<h2>About This Content</h2>
+
+<p>August 18, 2020</p>
+<h3>License</h3>
+
+<p>The Eclipse Foundation makes available all content in this plug-in (&quot;Content&quot;).  Unless otherwise
+indicated below, the Content is provided to you under the terms and conditions of the
+Eclipse Public License Version 2.0 (&quot;EPL&quot;).  A copy of the EPL is available
+at <a href="http://www.eclipse.org/legal/epl-2.0">http://www.eclipse.org/legal/epl-2.0</a>.
+For purposes of the EPL, &quot;Program&quot; will mean the Content.</p>
+
+<p>If you did not receive this Content directly from the Eclipse Foundation, the Content is
+being redistributed by another party (&quot;Redistributor&quot;) and different terms and conditions may
+apply to your use of any object code in the Content.  Check the Redistributor's license that was
+provided with the Content.  If no such license exists, contact the Redistributor.  Unless otherwise
+indicated below, the terms and conditions of the EPL still apply to any source code in the Content
+and such source code may be obtained at <a href="http://www.eclipse.org/">http://www.eclipse.org</a>.</p>
+
+<h3>Third Party Content</h3>
+<p>The Content includes items that have been sourced from third parties as set out below. If you
+did not receive this Content directly from the Eclipse Foundation, the following is provided
+for informational purposes only, and you should look to the Redistributor's license for
+terms and conditions of use.</p>
+
+<h4>Apache XML Security for Java</h4>
+
+<p>The plug-in includes software developed by <a href="https://www.apache.org/" target="_blank">The Apache Software Foundation</a> as part of the Apache XML Security for Java project.</p>
+
+<p>Apache XML Security for Java is provided to you under the terms and conditions of the <a href="https://www.apache.org/licenses/LICENSE-2.0.txt" target="_blank">Apache License, Version 2.0</a> (<a href="about_files/APACHE_LICENSE__VERSION_2.0.txt" target="_blank">APACHE_LICENSE__VERSION_2.0.txt</a>) license.</p>
+
+<p>Apache XML Security for Java including its source is available from <a href="https://santuario.apache.org/" target="_blank">santuario.apache.org/</a>. Bugs or feature requests can be made in the project issue tracking system at <a href="https://issues.apache.org/jira/browse/SANTUARIO" target="_blank">issues.apache.org/jira/browse/SANTUARIO</a>. The following mailing list can be used to communicate with the project communities: Apache Santuario Developer List &lt;dev@santuario.apache.org&gt; (<a href="http://news.gmane.org/gmane.text.xml.security.devel" target="_blank">archive</a>).</p>
+
+
+</body>
+</html>
diff --git a/apache/org.apache.commons.codec_1.13.0/src/main/resources/about_files/THE_APACHE_SOFTWARE_LICENSE__VERSION_2.0.txt b/apache/org.apache.santuario.xmlsec_2.2.0/src/main/resources/about_files/APACHE_LICENSE__VERSION_2.0.txt
similarity index 100%
copy from apache/org.apache.commons.codec_1.13.0/src/main/resources/about_files/THE_APACHE_SOFTWARE_LICENSE__VERSION_2.0.txt
copy to apache/org.apache.santuario.xmlsec_2.2.0/src/main/resources/about_files/APACHE_LICENSE__VERSION_2.0.txt
diff --git a/apache/pom.xml b/apache/pom.xml
index ab2780f..8d82bf0 100644
--- a/apache/pom.xml
+++ b/apache/pom.xml
@@ -16,7 +16,7 @@
 
   <modules>
     <module>org.apache.commons.cli_1.4.0</module>
-    <module>org.apache.commons.codec_1.13.0</module>
+    <module>org.apache.commons.codec_1.14.0</module>
     <module>org.apache.commons.collections4_4.4.0</module>
     <module>org.apache.commons.compress_1.19.0</module>
     <module>org.apache.commons.csv_1.8.0</module>
@@ -30,7 +30,9 @@
     <module>org.apache.pdfbox.xmpbox_2.0.6</module>
     <module>org.apache.pdfbox_2.0.6</module>
     <module>org.apache.poi_4.1.1</module>
+    <module>org.apache.poi.ooxml_4.1.1</module>
     <module>org.apache.poi.ooxml.schemas_4.1.1</module>
+    <module>org.apache.santuario.xmlsec_2.2.0</module>
     <module>org.apache.sshd.osgi_2.4.0</module>
     <module>org.apache.sshd.sftp_2.4.0</module>
     <module>org.apache.ws.commons.util_1.0.2</module>
diff --git a/releng/aggregationfeature/feature.xml b/releng/aggregationfeature/feature.xml
index 8302e98..2fbb7b6 100644
--- a/releng/aggregationfeature/feature.xml
+++ b/releng/aggregationfeature/feature.xml
@@ -91,6 +91,7 @@
   <plugin id="org.apache.felix.scr"  version="2.1.16.qualifier"/>
 
   <plugin id="org.apache.xmlbeans" version="3.1.0.qualifier"/>
+  <plugin id="org.apache.santuario.xmlsec" version="2.2.0.qualifier"/>
 
   <plugin id="com.cronutils"  version="5.0.5.qualifier"/>
   <plugin id="org.hsqldb"  version="2.2.9.qualifier"/>
@@ -169,7 +170,7 @@
 
   <plugin id="org.assertj" version="3.14.0.qualifier"/>
 
-  <plugin id="org.apache.commons.codec" version="1.13.0.qualifier"/>
+  <plugin id="org.apache.commons.codec" version="1.14.0.qualifier"/>
   <plugin id="org.apache.commons.logging" version="1.2.0.qualifier"/>
   <plugin id="org.apache.commons.csv" version="1.8.0.qualifier"/>
   <plugin id="org.apache.commons.fileupload" version="1.3.2.qualifier"/>
@@ -199,6 +200,7 @@
   <plugin id="org.apache.pdfbox" version="2.0.6.qualifier"/>
 
   <plugin id="org.apache.poi" version="4.1.1.qualifier"/>
+  <plugin id="org.apache.poi.ooxml" version="4.1.1.qualifier"/>
   <plugin id="org.apache.poi.ooxml.schemas" version="4.1.1.qualifier"/>
 
   <plugin id="org.apache.xmlrpc.client" version="3.1.3.qualifier"/>