Upgrade org.apache.ratis dependency to address CVE-2020-15250

[sumi-mathew]

Description

Upgrade the org.apache.ratis dependency from version 2.2.0 to 3.1.3 to avoiding CVE issues.

CVE-2020-15250

Motivation and Context

Upgrading the org.apache.ratis dependency from version 2.2.0 to 3.1.3 to to reduce the risk of introducing new security flaws

Impact

Test Plan

Contributor checklist

• Please make sure your submission complies with our contributing guide, in particular code style and commit standards.
• PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced.
• Documented new properties (with its default value), SQL syntax, functions, or other functionality.
• If release notes are required, they follow the release notes guidelines.
• Adequate tests were added if applicable.
• CI passed.

Release Notes

Please follow release notes guidelines and fill in the release notes below.

== RELEASE NOTES ==

Security Changes
* Upgrade org.apache.ratis  to 3.1.3 in response to `CVE-2020-15250<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15250>`_. 

[linux-foundation-easycla]

The committers listed above are authorized under a signed CLA.

• ✅ login: sumi-mathew (af18b60)

[steveburnett]

Thanks for the release note! Just one nit.

== RELEASE NOTES ==

Security Changes
* Upgrade org.apache.ratis  to 3.1.3 in response to `CVE-2020-15250<https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15250>`_. 

[imjalpreet]

LGTM, just a minor nit.

[yingsu00]

@jaystarshot Can you please re-review this PR to check if all your comments were addressed?

[jaystarshot]

I think its blocked due to @imjalpreet’s request