Fix CVE-2025-8916: Update bcpkix-jdk18on from 1.78.1 to 1.79

[ashwintumma23]

Description

Summary ...

Updates bcpkix-jdk18on from 1.78.1 to 1.79 to address CVE-2025-8916.

References

CVE-2025-8916: https://nvd.nist.gov/vuln/detail/CVE-2025-8916

Reason for upgrade

• CVE-2025-8916 affects Bouncy Castle PKIX (bcpkix-jdk18on) versions prior to 1.79. Upgrading to 1.79 resolves the vulnerability and ensures Druid uses a secure version of this dependency.
• Updated bcpkix-jdk18on dependency version from 1.78.1 to 1.79 in the main pom.xml dependency management section
  This dependency is used transitively by kubernetes-client and docker-java-core in kubernetes-extensions and integration tests

Tests

• Verified the dependency resolves correctly
• Build completes successfully with the updated version

Release note

Upgraded org.bouncycastle:bcpkix-jdk18on version to 1.79 to resolve CVE-2025-8916.

---

Key changed/added classes in this PR

• Top Level pom.xml

---

This PR has:

• been self-reviewed.
  • using the concurrency checklist (Remove this item if the PR doesn't have any relation to concurrency.)
• added documentation for new or modified features or behaviors.
• a release note entry in the PR description.
• added Javadocs for most classes and all non-trivial methods. Linked related entities via Javadoc links.
• added or updated version, license, or notice information in licenses.yaml
• added comments explaining the "why" and the intent of the code wherever would not be obvious for an unfamiliar reader.
• added unit tests or modified existing tests to cover new code paths, ensuring the threshold for code coverage is met.
• added integration tests.
• been tested in a test Druid cluster.

[abhishekrb19]

Thanks, @ashwintumma23! It looks like the 1.79 version currently has no reported vulnerabilities.