The commons-lang dependency is more than 8 years old:

https://github.com/camunda/camunda-bpm-platform/blob/master/engine-spring/pom.xml#L51

We can remove it, because we use it only rarely and we can easily have those helper methods in our own codebase.

If this is the only place where we use this dependency, we can also remove it from https://docs.camunda.org/manual/7.10/introduction/third-party-libraries/.