Upgrade maven 3.8 to use commons-lang3 >= 3.18.0 (CVE-2025-48924 GHSA-j288-q9x7-2f5v)

### Affected version

3.8.x

### Bug description

Please consider making the required changes to upgrade the `maven-3.8.x` branch to support commons-lang3 >= 3.18.0.

As of today, commons-lang3 is set to `3.8.1` in https://github.com/apache/maven/blob/maven-3.8.x/pom.xml#L54 which is affected by [CVE-2025-48924](https://nvd.nist.gov/vuln/detail/CVE-2025-48924).

See also: https://github.com/advisories/GHSA-j288-q9x7-2f5v

thanks in advance.

Inspect the maven-3.8.x branch's pom.xml at the commons-lang3 declaration around line 54. Update the dependency to a version at least 3.18.0 to address CVE-2025-48924, then verify that the Maven 3.8.x build remains compatible.

Written by the indexing model from the issue text.