chore: update suppressions 09122024091729 (#57)

re: moderneinc/dependency-vulnerability-reports#736

src/main/resources/suppressions.xml

@@ -1,6 +1,17 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <suppressions xmlns="https://jeremylong.github.io/DependencyCheck/dependency-suppression.1.3.xsd">
-    <suppress until="2025-09-10Z">
+    <suppress until="2024-09-25Z">
+        <notes><![CDATA[
+            file name: poi-3.16.jar
+            sev: HIGH
+            reason: via rewrite-apache for recipe
+            ]]></notes>
+        <packageUrl regex="true">^pkg:maven/org\.apache\.poi/poi@.*$</packageUrl>
+        <cve>CVE-2017-12626</cve>
+        <cve>CVE-2019-12415</cve>
+        <cve>CVE-2022-26336</cve>
+    </suppress>
+    <suppress until="2024-09-25Z">
         <notes><![CDATA[
    file name: rewrite-gradle-8.35.0-SNAPSHOT.jar: gradle-core-api-6.1.1.jar
    We need to support older gradle versions to be able to migrate away from them.
@@ -111,7 +122,7 @@
         <cve>CVE-2024-38809</cve>
     </suppress>
     <suppress until="2024-09-25Z">
-            <notes><![CDATA[
+        <notes><![CDATA[
        file name: guava-31.1-jre.jar
        sev: HIGH
          reason: False positive. Not referenced
@@ -147,4 +158,4 @@
         <cve>CVE-2022-3509</cve>
         <cve>CVE-2022-3510</cve>
     </suppress>
-</suppressions>
+</suppressions>