Fix dependabot issues (#5225)

* Update pom.xml

* Update pom.xml

* Update pom.xml

* Update pom.xml

* Update pom.xml

* Update pom.xml

* Update setup.py

* Update requirements_train.txt

Author: liu-shaojun

apps/model-inference-examples/model-inference-flink/pom.xml

@@ -37,8 +37,8 @@
         </dependency>
         <dependency>
             <groupId>commons-lang</groupId>
-            <artifactId>commons-lang</artifactId>
-            <version>2.6</version>
+            <artifactId>commons-lang3</artifactId>
+            <version>3.18.0</version>
         </dependency>
         <dependency>
             <groupId>com.intel.analytics.bigdl</groupId>

apps/model-inference-examples/recommendation-inference/pom.xml

@@ -22,8 +22,8 @@
     <dependencies>
         <dependency>
             <groupId>commons-lang</groupId>
-            <artifactId>commons-lang</artifactId>
-            <version>2.6</version>
+            <artifactId>commons-lang3</artifactId>
+            <version>3.18.0</version>
         </dependency>
         <dependency>
             <groupId>org.scala-lang</groupId>

apps/model-inference-examples/text-classification-inference/pom.xml

@@ -49,8 +49,8 @@
     <dependencies>
         <dependency>
             <groupId>commons-lang</groupId>
-            <artifactId>commons-lang</artifactId>
-            <version>2.6</version>
+            <artifactId>commons-lang3</artifactId>
+            <version>3.18.0</version>
         </dependency>
         <dependency>
             <groupId>com.intel.analytics.bigdl</groupId>

apps/model-inference-examples/text-classification-training/pom.xml

@@ -36,8 +36,8 @@
         </dependency>
         <dependency>
             <groupId>commons-lang</groupId>
-            <artifactId>commons-lang</artifactId>
-            <version>2.6</version>
+            <artifactId>commons-lang3</artifactId>
+            <version>3.18.0</version>
         </dependency>
         <dependency>
             <groupId>com.intel.analytics.bigdl</groupId>

python/nano/setup.py

@@ -138,7 +138,7 @@ def setup_package():
 
     install_requires = ["intel-openmp; (platform_machine=='x86_64' or platform_machine == 'AMD64')",
                         "cloudpickle",
-                        "protobuf==3.19.5",
+                        "protobuf==4.25.8",
                         "py-cpuinfo",
                         "pyyaml",
                         "packaging",

python/requirements/friesian/requirements_train.txt

@@ -12,4 +12,4 @@ hiredis==2.0.0
 psutil
 prometheus-client==0.11.0
 setproctitle
-protobuf==3.19.5
+protobuf>=4.25.8

scala/orca/pom.xml

@@ -55,7 +55,7 @@
         <dependency>
             <groupId>org.apache.zookeeper</groupId>
             <artifactId>zookeeper</artifactId>
-            <version>3.9.2</version>
+            <version>[3.9.3,)</version>
             <scope>test</scope>
         </dependency>
         <dependency>

scala/pom.xml

@@ -189,7 +189,7 @@
 	    <bigdl-core-all-scope>compile</bigdl-core-all-scope>
         <data-store-url>http://download.tensorflow.org</data-store-url>
         <lightgbm.scope>provided</lightgbm.scope>
-        <grpc.version>1.53.0</grpc.version>
+        <grpc.version>1.53.1</grpc.version>
         <parquet.version>1.12.3</parquet.version>
 
     </properties>