Upgrade to Commons Lang3 3.18.0.

Comment From: waileong

@snicoll Are there any plans to backport this dependency bump to the 3.4.x/3.5.x branches, considering it contains security fixes? Thanks!