Merge pull request #264 from FIXTradingCommunity/dependabot/maven/org.apache.logging.log4j-log4j-core-2.25.3

Bump org.apache.logging.log4j:log4j-core from 2.17.1 to 2.25.3

Author: kleihan

.github/workflows/maven.yml

@@ -13,7 +13,7 @@ jobs:
     steps:
     - uses: actions/checkout@v2
     - name: Set up JDK 11
-      uses: actions/setup-java@v2
+      uses: actions/setup-java@v3
       with:
         distribution: 'temurin'
         java-version: '11'

pom.xml

@@ -68,7 +68,7 @@
 		<base.java.version>11</base.java.version>
 		<commons-cli.version>1.4</commons-cli.version>
 		<junit.version>5.8.1</junit.version>
-		<log4j.version>2.17.1</log4j.version>
+		<log4j.version>2.25.3</log4j.version>
 		<saxon.version>10.6</saxon.version>
 		<slf4j.version>1.7.22</slf4j.version>
 		<stringtemplate.version>4.3.1</stringtemplate.version>