fix(deps): update dependency net.sf.saxon:saxon-he to v13

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
net.sf.saxon:Saxon-HE (source)	9.9.1-8 → 13.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[github-actions]

Vulnerability summary (fs) — latest: run #608

Critical	High	Medium	Low	Unknown
0	1	4	1	0

Change since last run: no change
Risk≥40: 1 (=)

Grype (risk-based)

⚠️ 1 at/above risk threshold 40

Critical	High	Medium	Low	Negligible	Unknown
1	1	4	1	0	0

Top by risk

Vulnerability	Package	Sev	Risk	EPSS	KEV
GHSA-xm6r-4466-mr74	orientdb-core 1.5.1	Critical	68.7	0.73
GHSA-j288-q9x7-2f5v	commons-lang 2.6	Medium	1.2	0.02
GHSA-w33c-445m-f8w7	okio 1.6.0	Medium	0.7	0.01
GHSA-pvp8-3xj6-8c6x	commons-configuration 1.6	Low	0.5	0.02
GHSA-8wh2-6qhj-h7j9	snappy 0.3	Medium	0.3	0.00
GHSA-r7wm-3cxj-wff9	jackson-core 3.1.2	High	0.0	-
GHSA-xx22-p4ch-683r	lz4-java 1.10.2	Medium	0.0	-

Links: workflow run · HTML report · SBOM · Grype report

[github-actions]

Vulnerability summary (docker.io/wetransform/hale-cli:latest) — latest: run #608

Critical	High	Medium	Low	Unknown
0	2	27	19	0

Change since last run: no change
Risk≥40: 2 (=)

Grype (risk-based)

⚠️ 2 at/above risk threshold 40

Critical	High	Medium	Low	Negligible	Unknown
2	2	123	52	9	0

Top by risk

Vulnerability	Package	Sev	Risk	EPSS	KEV
GHSA-xm6r-4466-mr74	orientdb-core 1.5.1	Critical	68.7	0.73
GHSA-xm6r-4466-mr74	orientdb-core 1.5.1	Critical	68.7	0.73
GHSA-j288-q9x7-2f5v	commons-lang 2.6	Medium	1.2	0.02
GHSA-j288-q9x7-2f5v	commons-lang 2.6	Medium	1.2	0.02
CVE-2023-31486	perl-base 5.34.0-3ubuntu1.7	Medium	0.9	0.02
GHSA-w33c-445m-f8w7	okio 1.6.0	Medium	0.7	0.01
GHSA-w33c-445m-f8w7	okio 1.6.0	Medium	0.7	0.01
CVE-2025-59375	libexpat1 2.4.7-1ubuntu0.7	Medium	0.6	0.01
CVE-2021-31879	wget 1.21.2-2ubuntu1.4	Medium	0.6	0.01
GHSA-pvp8-3xj6-8c6x	commons-configuration 1.6	Low	0.5	0.02

Links: workflow run · HTML report · SBOM · Grype report