[SPARK-25033] Bump Apache commons.{httpclient, httpcore}

[Fokko]

What changes were proposed in this pull request?

Bump the versions of Apache commons.{httpclient, httpcore} to make it congruent with Stocator.

Changelog httpclient: https://archive.apache.org/dist/httpcomponents/httpclient/RELEASE_NOTES-4.5.x.txt
Changelog httpcore: https://archive.apache.org/dist/httpcomponents/httpcore/RELEASE_NOTES.txt

How was this patch tested?

(Please explain how this patch was tested. E.g. unit tests, integration tests, manual tests)
(If this patch involves UI changes, please attach a screenshot; otherwise, remove this)

Please review http://spark.apache.org/contributing.html before opening a pull request.

[kiszk]

@Fokko Do we need to update files under dev/deps?

[Fokko]

Good point @kiszk. I've just updated the files.

[kiszk]

This change looks non-risky to me.
cc @swoen @HyukjinKwon

[HyukjinKwon]

ok to test

[SparkQA]

Test build #94553 has finished for PR 22007 at commit 618de1e.

• This patch fails Spark unit tests.
• This patch merges cleanly.
• This patch adds no public classes.

[SparkQA]

Test build #94563 has finished for PR 22007 at commit 316b9ad.

• This patch fails Spark unit tests.
• This patch merges cleanly.
• This patch adds no public classes.

[Fokko]

I don't really understand the error, can a Spark expert elaborate what's going on here?

[HyukjinKwon]

retest this please

[HyukjinKwon]

If you find this is unrelated, you could trigger another test here

[SparkQA]

Test build #94580 has finished for PR 22007 at commit 316b9ad.

• This patch fails SparkR unit tests.
• This patch merges cleanly.
• This patch adds no public classes.

[kiszk]

retest this please

[SparkQA]

Test build #94615 has finished for PR 22007 at commit 316b9ad.

• This patch passes all tests.
• This patch merges cleanly.
• This patch adds no public classes.

[kiszk]

LGTM

[Fokko]

Nice! What was the issue with Travis? Feels like some caching to me :)

[HyukjinKwon]

We don't currently run Travis in Spark.

[HyukjinKwon]

Merged to master.

[gatorsmile]

The bump is fine but this is not for making it congruent with Stocator, which is just an external connector.