Switch the commons-logging dependency with knowable vulnerabilities

[joaldodecarvalho]

Hi guys!

I would like to request a change on this commons-logging/1.2 dependency that have the vulnerabilities below:

CVE-2022-23307
CVE-2022-23305
CVE-2022-23302
CVE-2021-4104
CVE-2019-17571

I saw that this library is used by com.amazonaws:dynamodb-lock-client:1.3.0, maybe make sense to change to another library from software.amazon.awssdk package.

Thanks in advanced.