Merge pull request #256 from Qihoo360/dependabot/maven/org.apache.logging.log4j-log4j-core-2.16.0

Bump log4j-core from 2.11.0 to 2.16.0

Author: francis-du

pom.xml

@@ -108,7 +108,7 @@
         <scott-data-hsqldb.version>0.1</scott-data-hsqldb.version>
         <servlet.version>3.0.1</servlet.version>
         <slf4j.version>1.7.13</slf4j.version>
-        <log4j2.version>2.11.0</log4j2.version>
+        <log4j2.version>2.16.0</log4j2.version>
         <spark.version>2.3.0</spark.version>
         <sqlline.version>1.5.0</sqlline.version>
         <tpcds.version>1.2</tpcds.version>