[DSIP-36][Dependency] Upgrading dependent component versions

### Search before asking

- [X] I had searched in the [DSIP](https://github.com/apache/dolphinscheduler/issues/14102) and found no similar DSIP.

### Motivation

There are a lot of dependencies in DS that have CVE, we need to upgrade these versions, otherwise there will be security issues

### Design Detail

We need to find safe versions, preferably a compatible one, and upgrade.

### Compatibility, Deprecation, and Migration Plan

Should ve Compatibility.

### Test Plan

Test by UT/E2E.

### Code of Conduct

- [X] I agree to follow this project's [Code of Conduct](https://www.apache.org/foundation/policies/conduct)

The issue does not name particular files or dependencies. Start by identifying the project dependencies with CVEs and their currently supported versions, then check compatibility before upgrading. Run the unit and end-to-end tests; done means the affected dependencies use safe compatible versions without regressions.

Written by the indexing model from the issue text.