hippo-package-app-dependencies depends on too old version of commons-lang 2.1

When depending on both hippo-package-app-dependencies and hst-server-dependencies in one pom (hst site project), maven resolves commons-lang via hippo-package-app-dependencies (version 2.1) while hst-server-dependencies depends on commons-lang version 2.4 (at least).

This then can result in a startup failure:
java.lang.NoClassDefFoundError: org/apache/commons/lang/text/StrLookup
at org.hippoecm.hst.site.container.HstSiteConfigServlet.getConfiguration(HstSiteConfigServlet.java:482)

Most pragmatic solution is bumping the commons-lang version dependency in hippo-package-app-dependencies to 2.4+