[fix][sec] Remove dependency on out-dated commons-configuration 1.x (apache#24562)

(cherry picked from commit 2e77444)
(cherry picked from commit 0510a9f)

Author: lhotari

distribution/server/src/assemble/LICENSE.bin.txt

@@ -285,10 +285,9 @@ The Apache Software License, Version 2.0
     - commons-beanutils-commons-beanutils-1.11.0.jar
     - commons-cli-commons-cli-1.9.0.jar
     - commons-codec-commons-codec-1.18.0.jar
-    - commons-configuration-commons-configuration-1.10.jar
     - commons-io-commons-io-2.19.0.jar
     - commons-lang-commons-lang-2.6.jar
-    - commons-logging-commons-logging-1.1.1.jar
+    - commons-logging-commons-logging-1.3.5.jar
     - commons-collections-commons-collections-3.2.2.jar
     - org.apache.commons-commons-collections4-4.4.jar
     - org.apache.commons-commons-compress-1.27.1.jar

distribution/shell/src/assemble/LICENSE.bin.txt

@@ -342,7 +342,7 @@ The Apache Software License, Version 2.0
  * Apache Commons
     - commons-codec-1.18.0.jar
     - commons-io-2.19.0.jar
-    - commons-logging-1.2.jar
+    - commons-logging-1.3.5.jar
     - commons-lang3-3.18.0.jar
     - commons-text-1.13.1.jar
     - commons-compress-1.27.1.jar

pom.xml

@@ -257,9 +257,9 @@ flexible messaging model and an intuitive client API.</description>
     <aircompressor.version>0.27</aircompressor.version>
     <asynchttpclient.version>2.12.4</asynchttpclient.version>
     <commons-lang3.version>3.18.0</commons-lang3.version>
-    <commons-configuration.version>1.10</commons-configuration.version>
     <commons-io.version>2.19.0</commons-io.version>
     <commons-codec.version>1.18.0</commons-codec.version>
+    <commons-logging.version>1.3.5</commons-logging.version>
     <jakarta.ws.rs-api.version>2.1.6</jakarta.ws.rs-api.version>
     <hdrHistogram.version>2.1.9</hdrHistogram.version>
     <javax.servlet-api>3.1.0</javax.servlet-api>
@@ -831,18 +831,18 @@ flexible messaging model and an intuitive client API.</description>
         <version>${commons-compress.version}</version>
       </dependency>
 
-      <dependency>
-        <groupId>commons-configuration</groupId>
-        <artifactId>commons-configuration</artifactId>
-        <version>${commons-configuration.version}</version>
-      </dependency>
-
       <dependency>
         <groupId>commons-io</groupId>
         <artifactId>commons-io</artifactId>
         <version>${commons-io.version}</version>
       </dependency>
 
+      <dependency>
+        <groupId>commons-logging</groupId>
+        <artifactId>commons-logging</artifactId>
+        <version>${commons-logging.version}</version>
+      </dependency>
+
       <dependency>
         <groupId>org.apache.commons</groupId>
         <artifactId>commons-text</artifactId>

pulsar-common/pom.xml

@@ -122,12 +122,6 @@
     <dependency>
       <groupId>com.datastax.oss</groupId>
       <artifactId>bookkeeper-common-allocator</artifactId>
-      <exclusions>
-        <exclusion>
-          <groupId>commons-configuration</groupId>
-          <artifactId>commons-configuration</artifactId>
-        </exclusion>
-      </exclusions>
     </dependency>
 
     <dependency>

pulsar-functions/localrun-shaded/pom.xml

@@ -229,10 +229,6 @@
                                     <pattern>net.jpountz</pattern>
                                     <shadedPattern>org.apache.pulsar.functions.runtime.shaded.net.jpountz</shadedPattern>
                                 </relocation>
-                                <relocation>
-                                    <pattern>commons-configuration</pattern>
-                                    <shadedPattern>org.apache.pulsar.functions.runtime.shaded.commons-configuration</shadedPattern>
-                                </relocation>
                                 <relocation>
                                     <pattern>org.tukaani</pattern>
                                     <shadedPattern>org.apache.pulsar.functions.runtime.shaded.org.tukaani</shadedPattern>

pulsar-testclient/pom.xml

@@ -90,11 +90,6 @@
 			<version>${project.version}</version>
 		</dependency>
 
-		<dependency>
-			<groupId>commons-configuration</groupId>
-			<artifactId>commons-configuration</artifactId>
-		</dependency>
-
 		<dependency>
 			<groupId>info.picocli</groupId>
 			<artifactId>picocli</artifactId>