Bump commons-configuration2 from 2.7 to 2.9.0

Bumps commons-configuration2 from 2.7 to 2.9.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-configuration2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
diff --git a/pom.xml b/pom.xml
index bf18798..22a3e9c 100644
--- a/pom.xml
+++ b/pom.xml
@@ -76,7 +76,7 @@
     <!-- apache commons -->
     <commons.lang3.version>3.12.0</commons.lang3.version>
     <commons.beanutils.version>1.9.4</commons.beanutils.version>
-    <commons.configuration.version>2.7</commons.configuration.version>
+    <commons.configuration.version>2.9.0</commons.configuration.version>
     <commons.text.version>1.9</commons.text.version>
     <commons.logging.version>1.2</commons.logging.version>
     <commons.collections.3.version>3.2.2</commons.collections.3.version>