Bump log4j to 2.23.1