chore(deps): Upgrade org.apache.thrift:libthrift versio to 0.18.1

[sumi-mathew]

Description

Upgrade org.apache.thrift:libthrift versio to 0.18.1

Motivation and Context

Using a more recent version helps avoid potential vulnerabilities and ensures we aren't relying on outdated or unsupported code.

Impact

Test Plan

Contributor checklist

• Please make sure your submission complies with our contributing guide, in particular code style and commit standards.
• PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced.
• Documented new properties (with its default value), SQL syntax, functions, or other functionality.
• If release notes are required, they follow the release notes guidelines.
• Adequate tests were added if applicable.
• CI passed.
• If adding new dependencies, verified they have an OpenSSF Scorecard score of 5.0 or higher (or obtained explicit TSC approval for lower scores).

Release Notes

Please follow release notes guidelines and fill in the release notes below.

== NO RELEASE NOTE ==

[linux-foundation-easycla]

The committers listed above are authorized under a signed CLA.

• ✅ login: sumi-mathew / name: Sumi Mathew (4f2c110)

[sumi-mathew]

@ZacBlanco / @hantangwangd could you please review this PR.

[agrawalreetika]

I see even the version we are upgrading to has CVEs - https://mvnrepository.com/artifact/org.apache.thrift/libthrift/0.22.0

I think we could upgrade to CVE free version instead - https://mvnrepository.com/artifact/org.apache.thrift/libthrift/0.18.1

[agrawalreetika]

Mostly lgtm. I have one question: why do we need to change the scope from test in all the places?

[sumi-mathew]

Mostly lgtm. I have one question: why do we need to change the scope from test in all the places?

Thanks for the comment. When I upgraded to version 0.22.0, Getting a ‘Test dependency scope issues found’ error. After changing the version to 0.18.1, the error disappeared, so I reverted the changes.