[H] commons-lang3

[devopsmatt]

bump org.apache.commons:commons-lang3@3.17.0 to org.apache.commons:commons-lang3@3.18.0

[JFisk42]

Not sure why this is showing up again (maybe it never cleared from our snyk board? We bumped to 3.18 in #18312 and #18313