force runtime class path commons-beanutils:commons-beanutils:1.11.0 to avoid transitive dependency (#3935) (#3936)

(cherry picked from commit ab5f064)

Co-authored-by: Brian Flores <[email protected]>

Author: opensearch-trigger-bot[bot]

ml-algorithms/build.gradle

@@ -99,14 +99,6 @@ configurations.all {
     resolutionStrategy.force 'com.google.protobuf:protobuf-java:3.25.5'
     resolutionStrategy.force 'org.apache.commons:commons-compress:1.26.0'
     resolutionStrategy.force 'software.amazon.awssdk:bom:2.30.18'
-    resolutionStrategy.eachDependency { DependencyResolveDetails details ->
-        if (details.requested.group == 'commons-beanutils') {
-            details.useVersion '1.11.0'
-        }
-        if (details.requested.group == 'org.apache.commons' && details.requested.name == 'commons-beanutils2') {
-            details.useVersion '2.0.0-M2'
-        }
-    }
 }
 
 jacocoTestReport {

plugin/build.gradle

@@ -671,3 +671,12 @@ forbiddenPatterns {
     exclude '**/*.pdf'
     exclude '**/*.jpg'
 }
+
+configurations {
+    runtimeClasspath {
+        resolutionStrategy {
+            // CVE-48734: tribuo-clustering-kmeans:'4.2.1 causes a transitive dependency on beanutils:1.94
+            force 'commons-beanutils:commons-beanutils:1.11.0'
+        }
+    }
+}