[4.4.x] bump commons-logging:commons-logging from 1.3.6 to 1.4.0 (#2732)

Bumps [commons-logging:commons-logging](https://github.com/apache/commons-logging) from 1.3.6 to 1.4.0.
- [Changelog](https://github.com/apache/commons-logging/blob/master/RELEASE-NOTES.txt)
- [Commits](apache/commons-logging@rel/commons-logging-1.3.6...rel/commons-logging-1.4.0)

---
updated-dependencies:
- dependency-name: commons-logging:commons-logging
  dependency-version: 1.4.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

Author: dependabot[bot]

pom.xml

@@ -183,7 +183,7 @@
         <commons-compress.version>1.28.0</commons-compress.version>
         <commons-fileupload.version>1.6.0</commons-fileupload.version>
         <commons-lang3.version>3.20.0</commons-lang3.version>
-        <commons-logging.version>1.3.6</commons-logging.version>
+        <commons-logging.version>1.4.0</commons-logging.version>
         <commons-pool2.version>2.12.0</commons-pool2.version>
         <commons-io.version>2.22.0</commons-io.version>
         <eclipselink.version>2.7.15</eclipselink.version>