Update `org.apache.commons:commons-lang3` to version `3.17.0` (#2907)
diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index 69158d0..4bb07d1 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -73,7 +73,7 @@
     <commons-csv.version>1.11.0</commons-csv.version>
     <commons-dbcp2.version>2.12.0</commons-dbcp2.version>
     <commons-io.version>2.16.1</commons-io.version>
-    <commons-lang3.version>3.16.0</commons-lang3.version>
+    <commons-lang3.version>3.17.0</commons-lang3.version>
     <commons-logging.version>1.3.4</commons-logging.version>
     <!-- `com.conversantmedia:disruptor` version 1.2.16 requires Java 9: -->
     <conversant.disruptor.version>1.2.15</conversant.disruptor.version>
diff --git a/src/changelog/.2.x.x/update_org_apache_commons_commons_lang3.xml b/src/changelog/.2.x.x/update_org_apache_commons_commons_lang3.xml
new file mode 100644
index 0000000..b50d621
--- /dev/null
+++ b/src/changelog/.2.x.x/update_org_apache_commons_commons_lang3.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="2907" link="https://github.com/apache/logging-log4j2/pull/2907"/>
+  <description format="asciidoc">Update `org.apache.commons:commons-lang3` to version `3.17.0`</description>
+</entry>