fix CVE-2023-42503 due to djl models (opensearch-project#2011)

Signed-off-by: Xun Zhang <xunzh@amazon.com>

Author: Zhangxunmt

build.gradle

@@ -68,6 +68,7 @@ subprojects {
     configurations.all {
         // Force spotless depending on newer version of guava due to CVE-2023-2976. Remove after spotless upgrades.
         resolutionStrategy.force "com.google.guava:guava:32.1.2-jre"
+        resolutionStrategy.force 'org.apache.commons:commons-compress:1.25.0'
     }
 }
 

memory/build.gradle

@@ -26,7 +26,7 @@ plugins {
 dependencies {
     implementation project(path: ":${rootProject.name}-common", configuration: 'shadow')
     implementation group: 'org.opensearch', name: 'opensearch', version: "${opensearch_version}"
-    implementation group: 'org.apache.httpcomponents.core5', name: 'httpcore5', version: '5.2.1'
+    implementation group: 'org.apache.httpcomponents.core5', name: 'httpcore5', version: '5.2.2'
     implementation "org.opensearch:common-utils:${common_utils_version}"
     implementation group: 'com.google.guava', name: 'guava', version: '32.1.2-jre'
     testImplementation (group: 'junit', name: 'junit', version: '4.13.2') {