[Fix] Fix vulnerabilities in the present SDK version

[samikshya-db]

What changes are proposed in this pull request?

• What :

  • Update commons.io to fix the CVE in the present version. Looks like depandabot PRs are no longer being created/merged. [Link]
  • Change ini4j configuration because of vulnerability.

• Why

  • ini4j 0.5.4 version has an infinite loop situation in the following piece of code. This loop can cause excessive memory and CPU usage, potentially crashing the application. Alternate libraries like Apache Commons Configuration gracefully handle the situation (by limiting the recursions internally). I will raise a PR on SDK later today to replace the ini4j library. Moreover : the official site of ini4j is up for sale and the last update to this maven package was done in 2015. There is no reason we should continue to use this package.

Ini ini = new Ini();
  ini.load(new ByteArrayInputStream("""
      [deploy]
      a = ${test/a}
      b = ${doc/b}
              
      [test]
      a = ${deploy/a}
      b = ${deploy/b}
              
      [doc]
      a = 15
      b = 45
      """.getBytes(StandardCharsets.UTF_8)));
  
  // Will cause stack overflow
  ini.get("deploy").fetch("a");

How is this tested?

• The existing unit tests run fine.

[github-actions]

If integration tests don't run automatically, an authorized user can run them manually by following the instructions below:

Trigger:
go/deco-tests-run/sdk-java

Inputs:

• PR number: 383
• Commit SHA: 6d23597b91bbaa157507791ae471b15a541d20eb

Checks will be approved automatically on success.

[eng-dev-ecosystem-bot]

Test Details: go/deco-tests/11722901230

[renaudhartert-db]

LGTM