force commons-beanutils to 1.11.0 (#4000)

Signed-off-by: Jing Zhang <[email protected]>

Author: jngz-es

ml-algorithms/build.gradle

@@ -57,6 +57,7 @@ dependencies {
     }
     // Multi-tenant SDK Client
     implementation "org.opensearch:opensearch-remote-metadata-sdk:${opensearch_build}"
+    implementation 'commons-beanutils:commons-beanutils:1.11.0'
 
     def os = DefaultNativePlatform.currentOperatingSystem
     //arm/macos doesn't support GPU
@@ -147,12 +148,3 @@ spotless {
         eclipse().withP2Mirrors(Map.of("https://download.eclipse.org/", "https://mirror.umd.edu/eclipse/")).configFile rootProject.file('.eclipseformat.xml')
     }
 }
-
-configurations {
-    runtimeClasspath {
-        resolutionStrategy {
-            // CVE-48734: tribuo-clustering-kmeans:'4.2.1 causes a transitive dependency on beanutils:1.94
-            force 'commons-beanutils:commons-beanutils:1.11.0'
-        }
-    }
-}

plugin/build.gradle

@@ -417,6 +417,7 @@ configurations.all {
     resolutionStrategy.force "org.apache.logging.log4j:log4j-api:2.24.2"
     resolutionStrategy.force "org.apache.logging.log4j:log4j-core:2.24.2"
     resolutionStrategy.force "jakarta.json:jakarta.json-api:2.1.3"
+    resolutionStrategy.force 'commons-beanutils:commons-beanutils:1.11.0'
 }
 
 apply plugin: 'com.netflix.nebula.ospackage'
@@ -690,12 +691,3 @@ forbiddenPatterns {
     exclude '**/*.pdf'
     exclude '**/*.jpg'
 }
-
-configurations {
-    runtimeClasspath {
-        resolutionStrategy {
-            // CVE-48734: tribuo-clustering-kmeans:'4.2.1 causes a transitive dependency on beanutils:1.94
-            force 'commons-beanutils:commons-beanutils:1.11.0'
-        }
-    }
-}