maven-surefire-plugin versions defined twice in parent pom

It appears that maven-surefire-plugin and maven-failsafe-plugin's both are using an incorrect older version of the jars due to a duplicated defintion of the <version.surefire.plugin> property which both plugins get their version from.

Debezium's parent pom file currently defines this version as 3.0.0-M3 and then later 2.22.2 which takes precedence.