[2.29.x] Upgrade Solr & Zookeeper

[alexabird]

What does this PR do?

Cherry-pick upgrade solr commits from the 3.x branch + upgrade to the latest zookeeper to resolve the zookeeper CVEs

How should this be tested?

Run mvn org.commonjava.maven.plugins:directory-maven-plugin:highest-basedir@directories dependency-check:aggregate -B -pl '!distribution/docs, !platform/admin/modules/admin-modules-docs' -P '!itests' on project and ensure that zookeeper does not show up in CVE list.

Who is reviewing it?

@zkirksey
@glenhein

Select relevant component teams:

@codice/solr

Ask 2 committers to review/merge the PR and tag them here.

@jlcsmith
@derekwilhelm

Checklist:

• Documentation Updated
• Update / Add Threat Dragon models
• Update / Add Unit Tests
• Update / Add Integration Tests

Notes on Review Process

Please see Notes on Review Process for further guidance on requirements for merging and abbreviated reviews.

Review Comment Legend:

• ✏️ (Pencil) This comment is a nitpick or style suggestion, no action required for approval. This comment should provide a suggestion either as an in line code snippet or a gist.
• ❓ (Question Mark) This comment is to gain a clearer understanding of design or code choices, clarification is required but action may not be necessary for approval.
• ❗ (Exclamation Mark) This comment is critical and requires clarification or action before approval.

[alexabird]

build now

[cxddfbot]

Internal build has been started, your results will be available at build completion.

[cxddfbot]

Build FAILURE See the job results in legacy Jenkins UI or in Blue Ocean UI.

[alexabird]

build now

[cxddfbot]

Internal build has been started, your results will be available at build completion.

[cxddfbot]

Build SUCCESS See the job results in legacy Jenkins UI or in Blue Ocean UI.

[cxddfbot]

Internal build has been started, your results will be available at build completion.

[cxddfbot]

Build SUCCESS See the job results in legacy Jenkins UI or in Blue Ocean UI.

[derekwilhelm]

Should we add the jetty-alpn-java-client here as well since that is actually needed for JDK 9+ environments or is that no longer needed with this upgrade? Not all environments appear to need this but some certainly do if using the http2 client under the hood.

<bundle>mvn:org.eclipse.jetty/jetty-alpn-java-client/${solr.jetty.version}</bundle>

[alexabird]

Added 👍