DRILL-8462: upgrade to poi 5.2.5 and upgrade its transitive dependencies (#2848)

diff --git a/contrib/format-excel/pom.xml b/contrib/format-excel/pom.xml
index 5ecefbe..4da38e7 100644
--- a/contrib/format-excel/pom.xml
+++ b/contrib/format-excel/pom.xml
@@ -31,7 +31,7 @@
   <name>Drill : Contrib : Format : Excel</name>
 
   <properties>
-    <poi.version>5.2.4</poi.version>
+    <poi.version>5.2.5</poi.version>
   </properties>
   <dependencies>
     <dependency>
@@ -52,7 +52,7 @@
     <dependency>
       <groupId>com.github.pjfanning</groupId>
       <artifactId>excel-streaming-reader</artifactId>
-      <version>4.2.0</version>
+      <version>4.2.1</version>
     </dependency>
     <dependency>
       <groupId>org.apache.logging.log4j</groupId>
diff --git a/pom.xml b/pom.xml
index 9ce8895..1bd009d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -62,7 +62,7 @@
     <kerby.version>1.0.0</kerby.version>
     <findbugs.version>3.0.5</findbugs.version>
     <netty.tcnative.classifier />
-    <commons.io.version>2.14.0</commons.io.version>
+    <commons.io.version>2.15.0</commons.io.version>
     <commons.collections.version>4.4</commons.collections.version>
     <hamcrest.version>2.2</hamcrest.version>
     <curator.version>5.2.0</curator.version>
@@ -108,7 +108,7 @@
     <javax.el.version>3.0.0</javax.el.version>
     <surefire.version>3.1.2</surefire.version>
     <jna.version>5.13.0</jna.version>
-    <commons.compress.version>1.24.0</commons.compress.version>
+    <commons.compress.version>1.25.0</commons.compress.version>
     <hikari.version>4.0.3</hikari.version>
     <netty.version>4.1.73.Final</netty.version>
     <httpclient.version>4.5.14</httpclient.version>
@@ -119,13 +119,13 @@
     <commons.lang3.version>3.10</commons.lang3.version>
     <testcontainers.version>1.18.3</testcontainers.version>
     <typesafe.config.version>1.4.2</typesafe.config.version>
-    <commons.codec.version>1.14</commons.codec.version>
+    <commons.codec.version>1.16.0</commons.codec.version>
     <xerces.version>2.12.2</xerces.version>
     <commons.configuration.version>1.10</commons.configuration.version>
     <commons.beanutils.version>1.9.4</commons.beanutils.version>
     <httpdlog-parser.version>5.10.0</httpdlog-parser.version>
     <yauaa.version>7.19.2</yauaa.version>
-    <log4j.version>2.20.0</log4j.version>
+    <log4j.version>2.22.0</log4j.version>
     <aircompressor.version>0.25</aircompressor.version>
     <iceberg.version>0.12.1</iceberg.version>
     <univocity-parsers.version>2.8.3</univocity-parsers.version>