MLE-23377 - Bump Kafka to 3.9.1

Also, forced the latest commons-collection4 and upgraded to the latest logback version.

This leaves a single "medium" security risk (spring-framework) that will be addressed next.

Author: BillFarber

build.gradle

@@ -37,7 +37,13 @@ configurations {
 }
 
 ext {
-  kafkaVersion = "3.8.1"
+  kafkaVersion = "3.9.1"
+
+  configurations.all {
+    resolutionStrategy {
+      force "org.apache.commons:commons-collections4:4.5.0"
+    }
+  }
 }
 
 dependencies {
@@ -71,7 +77,7 @@ dependencies {
   testImplementation "org.apache.avro:avro-compiler:1.12.0"
 
   // Forcing logback to be used for test logging
-  testImplementation "ch.qos.logback:logback-classic:1.3.14"
+  testImplementation "ch.qos.logback:logback-classic:1.5.18"
   testImplementation "org.slf4j:jcl-over-slf4j:2.0.16"
 
   documentation files('LICENSE.txt')