update dependency metadata

Author: paulk-asert

build-logic/src/main/groovy/org.apache.groovy-base.gradle

@@ -131,6 +131,8 @@ dependencies {
 
     checkstyle "com.puppycrawl.tools:checkstyle:${versions.checkstyle}"
     spotbugs "com.github.spotbugs:spotbugs:${versions.spotbugs}"
+    spotbugs "org.apache.logging.log4j:log4j-api:${versions.log4j2}"
+    spotbugs "org.apache.logging.log4j:log4j-core:${versions.log4j2}"
 }
 
 def excludedFromManifest = [

gradle/verification-metadata.xml

@@ -232,8 +232,8 @@
             <sha512 value="5aafb351a0b2ca51e3aaee5b03af16caea4a53484c3b7f40153ef1b78edde8a8c2cc6638f77fdb95902f90a54b91938b68934b296ff88216d5135c2e40bc563a" origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
          </artifact>
       </component>
-      <component group="com.h3xstream.findsecbugs" name="findsecbugs-plugin" version="1.12.0">
-         <artifact name="findsecbugs-plugin-1.12.0.jar">
+      <component group="com.h3xstream.findsecbugs" name="findsecbugs-plugin" version="1.13.0">
+         <artifact name="findsecbugs-plugin-1.13.0.jar">
             <pgp value="CFC10B69382CBCF5387E51484ECE492B63E38ACF"/>
          </artifact>
       </component>
@@ -418,6 +418,16 @@
             <sha512 value="0b846ff8b036be03426be46da4974a126cfec7f491ec495859d1ba6f6ec4ea8625795bf420d076c01084a82f9339a7c001f79349de1f79ba096051b45993db7d" origin="Generated by Gradle because artifact wasn't signed" reason="Artifact is not signed"/>
          </artifact>
       </component>
+      <component group="org.apache.logging.log4j" name="log4j-api" version="2.23.0">
+         <artifact name="log4j-api-2.23.0.jar">
+            <sha512 value="6c73eb1471d6326e4c425a7323d1603091585bd0234a4ff50927201246df7c6195120b44871f561855311f8fead64c1bfa5a17c62835d9dcb87cfee7e476bdc8" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
+      <component group="org.apache.logging.log4j" name="log4j-core" version="2.23.0">
+         <artifact name="log4j-core-2.23.0.jar">
+            <sha512 value="4e9c09c14a6880d888412fa3393c1fa110af66c1e496f790a2c6ba34960f5fccbfc4d040b318277caac42f013a902cd4e6f6e1419009262d44cc0f40533fc168" origin="Generated by Gradle" reason="Artifact is not signed"/>
+         </artifact>
+      </component>
       <component group="me.champeau.gradle" name="buildscan-recipes-plugin" version="0.2.3">
          <artifact name="buildscan-recipes-plugin-0.2.3.jar">
             <sha512 value="2059df05624934092062ea615f188f5adfa80929fb7f5f1c341c60a7f86eeb31539021bf98fb7a5354c071c7ef2be99e5fdd459fc38bb621b8b447984da128cb" origin="Generated by Gradle because artifact wasn't signed" reason="Artifact is not signed"/>