Change Woodstox/stax2 deps wrt jackson-bom/99 (#759)

Author: cowtowncoder

pom.xml

@@ -70,6 +70,7 @@ alternative support for serializing POJOs as XML and deserializing XML as POJOs.
     <dependency>
       <groupId>org.codehaus.woodstox</groupId>
       <artifactId>stax2-api</artifactId>
+      <version>${stax2.version}</version>
       <exclusions>
         <exclusion>
 	  <groupId>javax.xml.stream</groupId>
@@ -89,6 +90,7 @@ alternative support for serializing POJOs as XML and deserializing XML as POJOs.
     <dependency>
       <groupId>com.fasterxml.woodstox</groupId>
       <artifactId>woodstox-core</artifactId>
+      <version>${woodstox.version}</version>
       <exclusions>
         <exclusion>
 	  <groupId>javax.xml.stream</groupId>

release-notes/VERSION-2.x

@@ -8,6 +8,10 @@ Project: jackson-dataformat-xml
 
 -
 
+2.19.1 (not yet released)
+
+- Add explicit version for Woodstox, stax2-api (no longer managed via jackson-bom)
+
 2.19.0 (24-Apr-2025)
 
 #508: `XmlMapper` is unable to deserialise into an empty record