Merge pull request #1232 from apache/dependabot/maven/commons-logging-commons-logging-1.4.0 build(deps): bump commons-logging:commons-logging from 1.3.6 to 1.4.0