Bumps commons-logging to 1.3.5 (#20156)

Author: DarshitChanpura

CHANGELOG.md

@@ -136,6 +136,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Bump `com.google.api:api-common` from 2.52.0 to 2.55.1 ([#20083](https://github.com/opensearch-project/OpenSearch/pull/20083))
 - Bump `actions/upload-artifact` from 4 to 5 ([#20081](https://github.com/opensearch-project/OpenSearch/pull/20081))
 - Bump `com.nimbusds:nimbus-jose-jwt` from 10.5 to 10.6 ([#20084](https://github.com/opensearch-project/OpenSearch/pull/20084))
+- Bump `commons-logging` from 1.2 to 1.3.5 ([#20156](https://github.com/opensearch-project/OpenSearch/pull/20156))
 
 ### Deprecated
 - Deprecated existing constructors in ThreadPoolStats.Stats in favor of the new Builder ([#19317](https://github.com/opensearch-project/OpenSearch/pull/19317))

client/rest/build.gradle

@@ -112,6 +112,16 @@ thirdPartyAudit {
       'org.apache.log4j.Level',
       'org.apache.log4j.Logger',
       'org.apache.log4j.Priority',
+      'org.apache.logging.log4j.Level',
+      'org.apache.logging.log4j.LogManager',
+      'org.apache.logging.log4j.Marker',
+      'org.apache.logging.log4j.MarkerManager',
+      'org.apache.logging.log4j.spi.AbstractLoggerAdapter',
+      'org.apache.logging.log4j.spi.ExtendedLogger',
+      'org.apache.logging.log4j.spi.LoggerAdapter',
+      'org.apache.logging.log4j.spi.LoggerContext',
+      'org.apache.logging.log4j.spi.LoggerContextFactory',
+      'org.apache.logging.log4j.util.StackLocatorUtil',
       //commons-logging provided dependencies
       'javax.servlet.ServletContextEvent',
       'javax.servlet.ServletContextListener',

client/rest/licenses/commons-logging-1.2.jar.sha1

@@ -0,0 +1 @@
+a3fcc5d3c29b2b03433aa2d2f2d2c1b1638924a1

client/rest/licenses/commons-logging-1.3.5.jar.sha1

@@ -101,6 +101,16 @@ thirdPartyAudit.ignoreMissingClasses(
   'org.apache.log4j.Level',
   'org.apache.log4j.Logger',
   'org.apache.log4j.Priority',
+  'org.apache.logging.log4j.Level',
+  'org.apache.logging.log4j.LogManager',
+  'org.apache.logging.log4j.Marker',
+  'org.apache.logging.log4j.MarkerManager',
+  'org.apache.logging.log4j.spi.AbstractLoggerAdapter',
+  'org.apache.logging.log4j.spi.ExtendedLogger',
+  'org.apache.logging.log4j.spi.LoggerAdapter',
+  'org.apache.logging.log4j.spi.LoggerContext',
+  'org.apache.logging.log4j.spi.LoggerContextFactory',
+  'org.apache.logging.log4j.util.StackLocatorUtil',
   //commons-logging provided dependencies
   'javax.servlet.ServletContextEvent',
   'javax.servlet.ServletContextListener'

client/sniffer/build.gradle

@@ -0,0 +1 @@
+a3fcc5d3c29b2b03433aa2d2f2d2c1b1638924a1

client/sniffer/licenses/commons-logging-1.2.jar.sha1

@@ -49,7 +49,7 @@ httpcore5         = "5.3.4"
 httpclient        = "4.5.14"
 httpcore          = "4.4.16"
 httpasyncclient   = "4.1.5"
-commonslogging    = "1.2"
+commonslogging    = "1.3.5"
 commonscodec      = "1.18.0"
 commonslang       = "3.18.0"
 commonscompress   = "1.28.0"

client/sniffer/licenses/commons-logging-1.3.5.jar.sha1

@@ -0,0 +1 @@
+a3fcc5d3c29b2b03433aa2d2f2d2c1b1638924a1