Bump org.apache.commons:commons-dbcp2 in /log4j-parent

Bumps org.apache.commons:commons-dbcp2 from 2.12.0 to 2.13.0.

---
updated-dependencies:
- dependency-name: org.apache.commons:commons-dbcp2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>

log4j-parent/pom.xml

@@ -71,7 +71,7 @@
     <commons-codec.version>1.17.1</commons-codec.version>
     <commons-compress.version>1.27.1</commons-compress.version>
     <commons-csv.version>1.12.0</commons-csv.version>
-    <commons-dbcp2.version>2.12.0</commons-dbcp2.version>
+    <commons-dbcp2.version>2.13.0</commons-dbcp2.version>
     <commons-io.version>2.18.0</commons-io.version>
     <commons-lang3.version>3.17.0</commons-lang3.version>
     <commons-logging.version>1.3.4</commons-logging.version>