chore(deps): Bump org.apache.logging.log4j:log4j-core from 2.24.3 to 2.25.3

[nishithakbhaskaran]

Description

Bump org.apache.logging.log4j:log4j-core from 2.24.3 to 2.25.3

Motivation and Context

#26863
#26839
#26835

Impact

Test Plan

Contributor checklist

• Please make sure your submission complies with our contributing guide, in particular code style and commit standards.
• PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced.
• Documented new properties (with its default value), SQL syntax, functions, or other functionality.
• If release notes are required, they follow the release notes guidelines.
• Adequate tests were added if applicable.
• CI passed.
• If adding new dependencies, verified they have an OpenSSF Scorecard score of 5.0 or higher (or obtained explicit TSC approval for lower scores).

Release Notes

Please follow release notes guidelines and fill in the release notes below.

== RELEASE NOTES ==

Security Changes
* Upgrade org.apache.logging.log4j:log4j-core from from 2.24.3 to 2.25.3 to address `CVE-2025-68161 <https://nvd.nist.gov/vuln/detail/CVE-2025-68161>`_. 

[agrawalreetika]

Version changes lgtm.
I was thinking since log4j is used in multiple places, should we mainitain it from root pom?

[nishithakbhaskaran]

Version changes lgtm. I was thinking since log4j is used in multiple places, should we mainitain it from root pom?

@agrawalreetika #24507 (comment) based on this previous PR comment it was moved out from root pom and added into respective connectors.

[hantangwangd]

Thanks @nishithakbhaskaran