Bump log2j to 2.17.1