Merge pull request #1626 from digital-preservation/dependabot/maven/droid-parent/org.apache.logging.log4j-log4j-core-2.25.4

Bump org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4 in /droid-parent

Author: MancunianSam

droid-parent/pom.xml

@@ -106,7 +106,7 @@
         <jwat.version>1.1.3</jwat.version>
         <hamcrest.version>3.0</hamcrest.version>
         <slf4j.version>2.0.17</slf4j.version>
-        <log4j2.version>2.25.3</log4j2.version>
+        <log4j2.version>2.25.4</log4j2.version>
         <checkstyle.version>10.21.2</checkstyle.version>
         <aws.version>2.42.0</aws.version>
         <junit.version>6.0.3</junit.version>
@@ -647,7 +647,7 @@ Copyright &copy; ${project.inceptionYear}-{currentYear} <a href="${project.organ
             <dependency>
                 <groupId>xml-apis</groupId>
                 <artifactId>xml-apis</artifactId>
-                <version>1.4.01</version>
+                <version>2.0.2</version>
             </dependency>
             <dependency>
                 <groupId>org.slf4j</groupId>
@@ -697,7 +697,7 @@ Copyright &copy; ${project.inceptionYear}-{currentYear} <a href="${project.organ
             <dependency>
                 <groupId>org.apache.commons</groupId>
                 <artifactId>commons-configuration2</artifactId>
-                <version>2.13.0</version>
+                <version>2.14.0</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.commons</groupId>