Merge pull request #1143 from apache/dependabot/maven/commons-logging-commons-logging-1.3.6

build(deps): bump commons-logging:commons-logging from 1.3.5 to 1.3.6