[fix][sec] Bump commons-io version to 2.18.0 (#23684)

Co-authored-by: Zach Chuba <[email protected]>
(cherry picked from commit e6f421e)

Author: 2 people

distribution/server/src/assemble/LICENSE.bin.txt

@@ -281,7 +281,7 @@ The Apache Software License, Version 2.0
     - commons-cli-commons-cli-1.5.0.jar
     - commons-codec-commons-codec-1.15.jar
     - commons-configuration-commons-configuration-1.10.jar
-    - commons-io-commons-io-2.14.0.jar
+    - commons-io-commons-io-2.18.0.jar
     - commons-lang-commons-lang-2.6.jar
     - commons-logging-commons-logging-1.1.1.jar
     - org.apache.commons-commons-collections4-4.4.jar

distribution/shell/src/assemble/LICENSE.bin.txt

@@ -341,7 +341,7 @@ The Apache Software License, Version 2.0
  * Apache Commons
     - commons-codec-1.15.jar
     - commons-configuration-1.10.jar
-    - commons-io-2.14.0.jar
+    - commons-io-2.18.0.jar
     - commons-lang-2.6.jar
     - commons-logging-1.2.jar
     - commons-lang3-3.11.jar

pom.xml

@@ -216,7 +216,7 @@ flexible messaging model and an intuitive client API.</description>
     <jcommander.version>1.82</jcommander.version>
     <commons-lang3.version>3.11</commons-lang3.version>
     <commons-configuration.version>1.10</commons-configuration.version>
-    <commons-io.version>2.14.0</commons-io.version>
+    <commons-io.version>2.18.0</commons-io.version>
     <commons-codec.version>1.15</commons-codec.version>
     <jakarta.ws.rs-api.version>2.1.6</jakarta.ws.rs-api.version>
     <hdrHistogram.version>2.1.9</hdrHistogram.version>