fix CVE-2023-42503 due to djl models (opensearch-project#2011)

Signed-off-by: Xun Zhang <[email protected]>

build.gradle

@@ -71,6 +71,7 @@ subprojects {
     configurations.all {
         // Force spotless depending on newer version of guava due to CVE-2023-2976. Remove after spotless upgrades.
         resolutionStrategy.force "com.google.guava:guava:32.1.2-jre"
+        resolutionStrategy.force 'org.apache.commons:commons-compress:1.25.0'
     }
 }