Fix commons-compress vulnerability and reduce log scope for de-caching scheduled items

Author: jdcasey

core/src/main/java/org/commonjava/indy/core/expire/ScheduleManager.java

@@ -780,7 +780,7 @@ public void cancelled( CacheEntryRemovedEvent<ScheduleKey, Map> e )
             logger.error( "[FATAL]The infinispan cache removed event for indy schedule manager is null.", new NullPointerException( "CacheEntryRemovedEvent is null" ) );
             return;
         }
-        logger.info( "Cache removed to cancel scheduling, Key is {}, Value is {}", e.getKey(), e.getValue() );
+        logger.trace( "Cache removed to cancel scheduling, Key is {}, Value is {}", e.getKey(), e.getValue() );
     }
 
     // This method is only used to check clustered schedule expire cache nodes topology changing

pom.xml

@@ -1039,6 +1039,12 @@
         <artifactId>commons-codec</artifactId>
         <version>1.10</version>
       </dependency>
+      <dependency>
+        <groupId>org.apache.commons</groupId>
+        <artifactId>commons-compress</artifactId>
+        <version>1.19</version>
+      </dependency>
+
       <!-- START: JAX-RS support -->
       <dependency>
           <groupId>io.undertow</groupId>