Upgrade to maven-artifact 3.9.11 or better to reduce dependence on old commons-lang3 version

[rhanton]

Description

At https://github.com/flamingock/mongock/blob/develop/mongock-core/mongock-runner/mongock-runner-core/pom.xml#L43-L47, you're using a nearly 6 year old version of org.apache.maven:maven-artifact. This is causing security issues in our build due to use of commons lang3 3.8.1, which has issues documented at https://mvnrepository.com/artifact/org.apache.commons/commons-lang3/3.8.1

PRIORITY

NORMAL

Version and environment

Mongock

• Mongock version = latest
• Modules involved = runner-core (we're using via springboot)
• How Mongock is used = N/A

[dieppa]

Hello @rhanton,

thanks for raising this. We’ll address the dependency update during this week.
In the meantime, you’re very welcome to open a PR — I’d be happy to review it quickly.

[rhanton]

Did a bit more research and it looks like we need to bump to at least maven-artifact 3.9.8 where lang3 was removed.