Bump org.apache.logging.log4j:log4j-core from 2.22.1 to 2.25.3 (#18874)

Updates org.apache.logging.log4j:log4j-core from 2.22.1 to 2.25.3 to address CVE-2025-68161.

Co-authored-by: Ashwin Tumma <[email protected]>

Author: ashwintumma23

licenses.yaml

@@ -1868,7 +1868,7 @@ name: Apache Log4j
 license_category: binary
 module: java-core
 license_name: Apache License version 2.0
-version: 2.22.1
+version: 2.25.3
 libraries:
   - org.apache.logging.log4j: log4j-1.2-api
   - org.apache.logging.log4j: log4j-api

pom.xml

@@ -108,7 +108,7 @@
         <jersey.version>1.19.4</jersey.version>
         <jackson.version>2.19.2</jackson.version>
         <codehaus.jackson.version>1.9.13</codehaus.jackson.version>
-        <log4j.version>2.22.1</log4j.version>
+        <log4j.version>2.25.3</log4j.version>
         <mysql.version>8.2.0</mysql.version>
         <mariadb.version>2.7.3</mariadb.version>
         <netty3.version>3.10.6.Final</netty3.version>