Merge pull request #37 from apache/dependabot/maven/ognl-ognl-3.2.21

Bump ognl from 3.2.18 to 3.2.21