fix: bump log4j to 2.17.0 (#116)

* fix: bump log4j to 2.17.0

* chore: bump artefact version

pom.xml

@@ -5,7 +5,7 @@
 
   <groupId>app.coronawarn.testresult</groupId>
   <artifactId>cwa-testresult-server</artifactId>
-  <version>1.4.1-SNAPSHOT</version>
+  <version>1.4.2-SNAPSHOT</version>
   <packaging>jar</packaging>
 
   <name>cwa-testresult-server</name>
@@ -31,9 +31,9 @@
     <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
     <!-- dependencies -->
-    <spring.boot.version>2.5.4</spring.boot.version>
+    <spring.boot.version>2.5.7</spring.boot.version>
     <spring.cloud.version>2020.0.4</spring.cloud.version>
-    <lombok.version>1.18.12</lombok.version>
+    <lombok.version>1.18.22</lombok.version>
     <liquibase.version>3.9.0</liquibase.version>
     <springdoc.version>1.3.9</springdoc.version>
     <guava.version>30.0-jre</guava.version>
@@ -194,6 +194,18 @@
       <artifactId>shedlock-provider-jdbc-template</artifactId>
       <version>4.25.0</version>
     </dependency>
+    <dependency>
+      <groupId>org.apache.logging.log4j</groupId>
+      <artifactId>log4j-api</artifactId>
+      <version>2.17.0</version>
+      <scope>runtime</scope>
+  </dependency>
+  <dependency>
+    <groupId>org.apache.logging.log4j</groupId>
+    <artifactId>log4j-to-slf4j</artifactId>
+    <version>2.17.0</version>
+    <scope>runtime</scope>
+</dependency>
   </dependencies>
 
   <build>