address CVE-2025-58057, CVE-2025-48924

Signed-off-by: Brian Flores <[email protected]>

Author: brianf-aws

common/build.gradle

@@ -77,6 +77,10 @@ jacocoTestCoverageVerification {
 }
 check.dependsOn jacocoTestCoverageVerification
 
+configurations.all {
+    resolutionStrategy.force 'org.apache.commons:commons-lang3:3.18.0'
+}
+
 spotless {
     java {
         removeUnusedImports()

ml-algorithms/build.gradle

@@ -91,15 +91,15 @@ dependencies {
     implementation (group: 'software.amazon.awssdk', name: 'netty-nio-client', version: "2.30.18")  {
         exclude group: "io.netty"
     }
-    implementation 'io.netty:netty-codec-http2:4.2.4.Final'
-    implementation 'io.netty:netty-codec-http:4.2.4.Final'
-    implementation 'io.netty:netty-common:4.2.4.Final'
-    implementation 'io.netty:netty-buffer:4.2.4.Final'
-    implementation 'io.netty:netty-transport:4.2.4.Final'
-    implementation 'io.netty:netty-handler:4.2.4.Final'
-    implementation 'io.netty:netty-resolver:4.2.4.Final'
-    implementation 'io.netty:netty-codec:4.2.4.Final'
-    implementation 'io.netty:netty-transport-classes-epoll:4.2.4.Final'
+    implementation 'io.netty:netty-codec-http2:4.2.5.Final'
+    implementation 'io.netty:netty-codec-http:4.2.5.Final'
+    implementation 'io.netty:netty-common:4.2.5.Final'
+    implementation 'io.netty:netty-buffer:4.2.5.Final'
+    implementation 'io.netty:netty-transport:4.2.5.Final'
+    implementation 'io.netty:netty-handler:4.2.5.Final'
+    implementation 'io.netty:netty-resolver:4.2.5.Final'
+    implementation 'io.netty:netty-codec:4.2.5.Final'
+    implementation 'io.netty:netty-transport-classes-epoll:4.2.5.Final'
     testImplementation("com.fasterxml.jackson.core:jackson-annotations:${versions.jackson}")
     testImplementation("com.fasterxml.jackson.core:jackson-databind:${versions.jackson_databind}")
     testImplementation group: 'com.networknt' , name: 'json-schema-validator', version: '1.4.0'

search-processors/build.gradle

@@ -75,6 +75,10 @@ jacocoTestCoverageVerification {
 
 check.dependsOn jacocoTestCoverageVerification
 
+configurations.all {
+    resolutionStrategy.force 'org.apache.commons:commons-lang3:3.18.0'
+}
+
 spotless {
     java {
         removeUnusedImports()