Merge pull request #3631 from apache/dependabot/maven/org.apache.commons-commons-configuration2-2.10.1

[STORM-4039] Bump org.apache.commons:commons-configuration2 from 2.9.0 to 2.10.1