build(deps): bump passay from 1.3.1 to 1.6.2

[dependabot[bot]]

Bumps passay from 1.3.1 to 1.6.2.

Release notes

Sourced from passay's releases.

v1.6.2 release

See https://www.passay.org/download.html for change log and binaries.

v1.6.1 release

See https://www.passay.org/download.html for change log and binaries.

Commits

• 24e0874 Update version for 1.6.2 release.
• 2df08b1 Update plugin versions.
• 621f6a1 Update plugin and dependency versions.
• 4020797 Update assembly plugin version.
• 6d9ae53 Rename GermanQwertz enum to DEQwertz.
• 8fde9b7 Merge pull request #133 from giraone/master
• 0a3f978 Added keyboard sequence for german QWERTZ layout.
• 596c672 Update plugin and dependency versions.
• 641fbb8 Rename NewCyrillic to CyrillicModern.
• dc62566 Merge pull request #132 from Jaime-Pinkman/master
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[cf-gitbot]

We have created an issue in Pivotal Tracker to manage this:

https://www.pivotaltracker.com/story/show/182890001

The labels on this github issue will be updated when the story is started.

[strehle]

@dependabot recreate

[strehle]

seems that you need to pick https://github.com/cloudfoundry/uaa/pull/1478 into this branch if you want do the update

[swalchemist]

Thanks for the tip, @strehle! That commit plus getting the latest version of UaaPasswordPolicyValidatorTests.java from the develop branch fixed it.

We're not sure why the subtle change in the error messages hadn't made it to the 74.5.x branch yet, since it was introduced to the develop branch 8 years ago.

We'd rather reference the production properties file instead of adding a copy of the some of the properties to the test resources, but we didn't figure out how to do that.