Update Apache HttpClient5 and HttpCore5 (CVE-2025-27820) (#18152) (#18155)

(cherry picked from commit 3fe2946)

Signed-off-by: Andriy Redko <drreta@gmail.com>

Author: reta

CHANGELOG.md

@@ -9,6 +9,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 ### Changed
 
 ### Dependencies
+- Update Apache HttpClient5 and HttpCore5 (CVE-2025-27820) ([#18152](https://github.com/opensearch-project/OpenSearch/pull/18152))
 
 ### Deprecated
 

client/rest/licenses/httpclient5-5.4.1.jar.sha1

@@ -0,0 +1 @@
+29aafa2d5ced55ed75dab37cce5e125fb06e54d8

client/rest/licenses/httpclient5-5.4.4.jar.sha1

@@ -0,0 +1 @@
+ea47f0fe6e00ffb07cec3a0cb1bb801b1a9cc353

client/rest/licenses/httpcore5-5.3.2.jar.sha1

@@ -0,0 +1 @@
+3742a9a9ba3a5a0d45be230093b52a1302a561e2

client/rest/licenses/httpcore5-5.3.4.jar.sha1

@@ -0,0 +1 @@
+584f61333473c03458ccb38b7fa9a06b847b4046

client/rest/licenses/httpcore5-h2-5.3.2.jar.sha1

@@ -382,9 +382,6 @@ public void testHeaders() throws Exception {
             if (method.equals("HEAD") == false) {
                 standardHeaders.add("Content-length");
             }
-            if (method.equals("HEAD") == true || method.equals("GET") == true || method.equals("OPTIONS") == true) {
-                standardHeaders.add("Upgrade");
-            }
 
             final Header[] requestHeaders = RestClientTestUtil.randomHeaders(getRandom(), "Header");
             final int statusCode = randomStatusCode(getRandom());

client/rest/licenses/httpcore5-h2-5.3.4.jar.sha1

@@ -0,0 +1 @@
+29aafa2d5ced55ed75dab37cce5e125fb06e54d8

client/rest/licenses/httpcore5-reactive-5.3.2.jar.sha1

@@ -0,0 +1 @@
+ea47f0fe6e00ffb07cec3a0cb1bb801b1a9cc353

client/rest/licenses/httpcore5-reactive-5.3.4.jar.sha1

@@ -42,8 +42,8 @@ reactor_netty     = "1.2.4"
 reactor           = "3.5.20"
 
 # client dependencies
-httpclient5       = "5.4.1"
-httpcore5         = "5.3.2"
+httpclient5       = "5.4.4"
+httpcore5         = "5.3.4"
 httpclient        = "4.5.14"
 httpcore          = "4.4.16"
 httpasyncclient   = "4.1.5"