[fix][sec] Upgrade Jackson version to 2.18.6

[oneby-wang]

Fixes #25260

Motivation

Jackson 2.17.x used in Pulsar is no longer maintained. Upgrade Jackson version to a LTS version.

Modifications

Upgrade Jackson version to 2.18.6 and exclude javax.xml.bind-jaxb-api dependency.

Verifying this change

• Make sure that the change passes the CI checks.

Does this pull request potentially affect one of the following parts:

If the box was checked, please highlight the changes

• Dependencies (add or upgrade a dependency)
• The public API
• The schema
• The default values of configurations
• The threading model
• The binary protocol
• The REST endpoints
• The admin CLI options
• The metrics
• Anything that affects deployment

Documentation

• doc
• doc-required
• doc-not-needed
• doc-complete

Matching PR in forked repository

PR in forked repository: oneby-wang#28

[codecov-commenter]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.59%. Comparing base (82846e5) to head (696553c).
⚠️ Report is 58 commits behind head on master.

Additional details and impacted files

@@             Coverage Diff              @@
##             master   #25264      +/-   ##
============================================
- Coverage     72.73%   72.59%   -0.15%     
- Complexity    34047    34411     +364     
============================================
  Files          1959     1959              
  Lines        155418   155418              
  Branches      17731    17731              
============================================
- Hits         113050   112832     -218     
- Misses        33378    33581     +203     
- Partials       8990     9005      +15     

Flag	Coverage Δ
inttests	25.77% <ø> (-0.40%)	⬇️
systests	22.35% <ø> (-0.12%)	⬇️
unittests	73.57% <ø> (-0.12%)	⬇️

Flags with carried forward coverage won't be shown. Click here to find out more.
see 97 files with indirect coverage changes

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.
• 📦 JS Bundle Analysis: Save yourself from yourself by tracking and limiting bundle sizes in JS merges.

[lhotari]

We'll need this also in maintenance branches to patch GHSA-72hv-8253-57qq