Log Message:
Update apache-maven to 3.6.3. Closes PR pkg/55221.
The patch is provided by Vicente Chaves. Thank you!

Changes from Maven 3.6.2 to 3.6.3

* This is a regression release to fix some critical issues shipped with 3.6.2.
* Some license issues on binary distribution have been fixed.
* This Maven distribution is now Reproducible: if you download Maven source
  archive (apache-maven-3.6.3-src.zip or .tar.gz), build it on Windows with
  JDK 8 using following command:

See https://maven.apache.org/docs/3.6.3/release-notes.html for the detailed \ 
issue list.

Changes from Maven 3.6.1 to 3.6.2

* This release focuses mostly performance improvements, better memory footprint,
  and less CPU usage.
* We are continuing to convert Maven Core to use JSR 330 annotations instead of
  Plexus (still not finished, see MNG-5577).
* New support for 'release' qualifier (see MNG-6655).
* The toolchain.xml file supports environment variables (see MNG-6665).

See https://maven.apache.org/docs/3.6.2/release-notes.html for the detailed \ 
issue list.

Changes from Maven 3.6.0 to 3.6.1

* An issue has been fixed causing multiple executions of plugin goals, related
  to using parallel build options like mvn plugin:goal -T 4. This resulted in
  duplicated executions of phases. This has been fixed with MNG-5965.
* NullPointerException related to call in parallel build like mvn -T 1C clean
  javadoc:aggregate MNG-5705
* A performance issue related to artifact transfer has been found related to
  WAGON-537. It has been solved via the update to Maven Wagon 3.3.1.
* There had been issues related calling Maven script like this: mvn -f ..
* Having parentheses within the path, which has been fixed with MNG-6346.
* Script can break having special characters as part of the path, which has been
  solved with MNG-6256.
* Issue related to the Maven Resolver API which broke some IDEs (for example
  https://youtrack.jetbrains.com/issue/IDEA-201282); this has been fixed by MNG-6538.
* Issue related to missing event for ToolchainsBuildingResult on EventSpy MNG-6558.
* Issue related to support Java 9+ ClassLoader.findClass(String moduleName,
  String name) in Mojos. This has been fixed with MNG-6543.
* Improvement about the memory consumption has been done with MNG-6571.
* Issue related to relative parent POM resolution failing in 3.5.0 with complex
  multimodule builds has been fixed with MNG-6261.
* Missing export for org.slf4j.event.Level has been done with MNG-6618

See https://maven.apache.org/docs/3.6.1/release-notes.html for the detailed \ 
issue list.

# Changes from Maven 3.5.4 to 3.6.0

* There had been issues related to the project discoverytime which has been
  increased in previous version which influenced some of our users. This should
  have been fixed MNG-6311, MNG-6383 and MNG-6412.
* The output in the reactor summary has been improved MNG-6391 cause it confused
  people.
* There was an issue related to the classpath ordering MNG-6415 in Maven which
  can cause issues which has been fixed.
See https://maven.apache.org/docs/3.6.0/release-notes.html for the detailed \ 
issue list.