fixing gradle issue

[dhrubo-os]

Description

[As mac doesn't support GPU building fails in mac. shows error :

Caused by: java.lang.UnsatisfiedLinkError: no onnxruntime in java.library.path: /Users/dhrubo/Library/Java/Extensions:/Library/Java/Extensions:/Network/Library/Java/Extensions:/System/Library/Java/Extensions:/usr/lib/java:.

]

Issues Resolved

[List any issues this PR will resolve]

Check List

• New functionality includes testing.
  • All tests pass
• New functionality has been documented.
  • New functionality has javadoc added
• Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[codecov-commenter]

Codecov Report

Merging #735 (d270683) into 2.x (ffb8a4e) will increase coverage by 0.10%.
The diff coverage is 0.00%.

📣 This organization is not using Codecov’s GitHub App Integration. We recommend you install it so Codecov can continue to function properly for your repositories. Learn more

@@             Coverage Diff              @@
##                2.x     #735      +/-   ##
============================================
+ Coverage     84.95%   85.05%   +0.10%     
- Complexity     1076     1078       +2     
============================================
  Files           100      100              
  Lines          3922     3922              
  Branches        370      370              
============================================
+ Hits           3332     3336       +4     
+ Misses          433      430       -3     
+ Partials        157      156       -1     

Flag	Coverage Δ
ml-commons	85.05% <0.00%> (+0.10%)	⬆️

Flags with carried forward coverage won't be shown. Click here to find out more.

Impacted Files	Coverage Δ
...n/java/org/opensearch/ml/model/MLModelManager.java	78.60% <0.00%> (ø)
.../cluster/MLCommonsClusterManagerEventListener.java	79.41% <0.00%> (+11.76%)	⬆️

Help us with your feedback. Take ten seconds to tell us how you rate us. Have a feature suggestion? Share it here.

[ylwu-amzn]

Mend security check failed,

Dependency Hierarchy:

-> opensearch-2.6.0-SNAPSHOT.jar (Root Library)

   -> opensearch-x-content-2.6.0-SNAPSHOT.jar

     -> ❌ snakeyaml-1.33.jar (Vulnerable Library)

[dhrubo-os]

Mend security check failed,

Dependency Hierarchy:

-> opensearch-2.6.0-SNAPSHOT.jar (Root Library)

   -> opensearch-x-content-2.6.0-SNAPSHOT.jar

     -> ❌ snakeyaml-1.33.jar (Vulnerable Library)

I don't think there's anything we can do about this.

Related issue from opensearch core: opensearch-project/OpenSearch#5576

The original issue is still open: https://bitbucket.org/snakeyaml/snakeyaml/issues/561/cve-2022-1471-vulnerability-in

May be we can ignore this vulnerability as we don't use snakeyml directly.