Spring LDAP should use a supported version of Spring Security. Because 5.8 is out of support and because this dependencies is only needed in tests, we can be a bit more aggressive with the upgrade.