build(deps): bump org.apache.logging.log4j:log4j-core (#16204)

Bumps org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

dubbo-dependencies-bom/pom.xml

@@ -151,7 +151,7 @@
     <log4j_version>1.2.17</log4j_version>
     <logback_version>1.2.13</logback_version>
     <!-- Fix the bug of log4j refer:https://github.com/apache/logging-log4j2/pull/608 -->
-    <log4j2_version>2.25.3</log4j2_version>
+    <log4j2_version>2.25.4</log4j2_version>
     <commons_io_version>2.21.0</commons_io_version>
     <commons-codec_version>1.21.0</commons-codec_version>
     <groovy_version>4.0.30</groovy_version>