GROOVY-6173: bump xstream dependency 1.4.2 -> 1.4.4