[AUTO] Increment version to 3.9.0-SNAPSHOT (#1457)

Co-authored-by: Amit Galitzky <amgalitz@amazon.com>
Signed-off-by: opensearch-ci-bot <opensearch-infra@amazon.com>
Signed-off-by: Amit Galitzky <amgalitz@amazon.com>

Author: opensearch-ci-bot

build.gradle

@@ -9,7 +9,7 @@ import java.nio.file.Paths
 
 buildscript {
     ext {
-        opensearch_version = System.getProperty("opensearch.version", "3.8.0-SNAPSHOT")
+        opensearch_version = System.getProperty("opensearch.version", "3.9.0-SNAPSHOT")
         buildVersionQualifier = System.getProperty("build.version_qualifier", "")
         isSnapshot = "true" == System.getProperty("build.snapshot", "true")
         version_tokens = opensearch_version.tokenize('-')
@@ -257,8 +257,12 @@ dependencies {
     // Jackson dependencies
     implementation("com.fasterxml.jackson.core:jackson-annotations:${versions.jackson_annotations}")
     implementation("tools.jackson.core:jackson-databind:${versions.jackson3_databind}")
-    // Required by swagger-parser at runtime (no longer provided transitively by upstream)
+    // Jackson 2.x stack required by swagger-parser at runtime. OpenSearch core has migrated to
+    // Jackson 3 (tools.jackson), so these are no longer provided transitively by upstream.
+    implementation("com.fasterxml.jackson.core:jackson-core:${versions.jackson}")
     implementation("com.fasterxml.jackson.core:jackson-databind:${versions.jackson_databind}")
+    implementation("com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:${versions.jackson_databind}")
+    implementation("org.yaml:snakeyaml:${versions.snakeyaml}")
 
     testImplementation("org.junit.jupiter:junit-jupiter:${junitJupiterVersion}")
     testImplementation("com.fasterxml.jackson.datatype:jackson-datatype-jsr310:${versions.jackson_databind}")
@@ -284,6 +288,11 @@ dependencies {
             // to an older version than the one declared via the version catalog, causing a version conflict.
             // Pin to the catalog version to resolve it.
             force("com.fasterxml.jackson.core:jackson-annotations:${versions.jackson_annotations}")
+            // opensearch-remote-metadata-sdk pins log4j at the version of the core snapshot it was
+            // last built against, which lags the log4j that OpenSearch core currently ships.
+            // Pin to the core version so we always match core (and keep its CVE fixes).
+            force("org.apache.logging.log4j:log4j-api:${versions.log4j}")
+            force("org.apache.logging.log4j:log4j-core:${versions.log4j}")
 
             if (System.getenv('REMOTE_METADATA_SDK_IMPL') == 'ddb-client') {
                 // OpenSearch Java client brings in different versions of the below dependencies.