struts

Team
          I am upgrading the apache jars. Due to compatibility issues in my
project, I am unable to upgrade struts1 to struts2 but need to upgrade
other jars. I would require the following information.

1. Is struts.jar (version 1.1) dependent on commons-lang.jar?
2. If yes, can i use commons-lang3:jar:3.14.0 with struts 1.1 instead of
using commons-lang.jar?
3. Is struts 1.1 dependent on commons-digester? If yes, which is the
highest version of commons-digester, struts1.1 is compatible with?
4. The highest version of commons-digester 2.1 has vulnerability in the
compile dependencies. Can i use commons-digester3 with struts1.1? If yes,
what is the highest compatible version?
5. Is struts 1.1 dependent on commons-validator? If yes, which is the
highest version of commons-validator, struts1.1 is compatible with?


Thanks