Replace depreceated new URL() with URI().toURL() for Java >= 20

[flyingfischer]

We should probably replace the deprecated constructor new URL() with something like new URI().toURL() for Java >= 20.

Please find a patch attached.

java-saml.txt

[flyingfischer]

In com.onelogin.saml2.util this line

PeriodFormatter periodFormatter = ISOPeriodFormat.standard().withLocale(new Locale("UTC"));

should probably rather be something like:

PeriodFormatter periodFormatter = ISOPeriodFormat.standard().withLocale(Locale.ENGLISH);

And org.apache.commons.lang3.text.StrSubstitutor should be replaced by org.apache.commons.text.StringSubstitutor.

Attached a revised patch with updated dependencies.

java-saml-patch-v2.txt

[flyingfischer]

Patch seems to be incomplete.

java-saml-patch-v3.txt