Update plugins in 2023-02-15 security advisory

[daniel-beck]

https://www.jenkins.io/security/advisory/2023-02-15/

[MarkEWaite]

Thanks!

[jglick]

Also in #1761, #1762, #1763.

[jglick]

BTW I doubt we really need to bother filing these explicitly. From the PoV of the bom, these are just routine plugin updates that can be processed whenever by Dependabot (except in the rare case that a security patch introduces an API or changes behavior likely to be covered by downstream tests).

[daniel-beck]

@jglick We started doing this because you requested it in #1496 (review). Did we misunderstand what you were asking for?

[jglick]

Heh, completely forgot about that. In that case it was important to update a set of plugins together, though not because they were part of a security update per se.

Not a problem to do these updates, especially if you already have a process for it. Just FYI that in the typical case that they are unrelated updates released on the same day, there is no particular need to bump them manually, or to do so in an atomic PR.