arrow

GH-35771: [Java] Bump Jackson to avoid CVE (#35791)



### Rationale for this change

A dependency has a reported CVE.

### What changes are included in this PR?

Bump the dependency.

### Are these changes tested?

N/A

### Are there any user-facing changes?

No.

**This PR contains a "Critical Fix".**
* Closes: #35771

Authored-by: David Li <li.davidm96@gmail.com>
Signed-off-by: David Li <li.davidm96@gmail.com>