MINOR: Upgrade scala-logging to 3.9.5

[viktorsomogyi]

Committer Checklist (excluded from commit message)

• Verify design and implementation
• Verify test coverage and CI build status
• Verify documentation (including upgrade notes)

[viktorsomogyi]

@ijuma would you please review this small PR?

[sjhajharia]

@viktorsomogyi
I see that both scala-logging 3.9.5 and 3.9.4 have the same vulnerability coming in from [CVE-2023-6378]. Is there a reason thus that we want this upgrade?

ref:
https://mvnrepository.com/artifact/com.typesafe.scala-logging/scala-logging_3/3.9.5
https://mvnrepository.com/artifact/com.typesafe.scala-logging/scala-logging_3/3.9.4

Thanks!

[viktorsomogyi]

@sjhajharia thanks for highlighting the CVE, it's important to consider them. This version bump doesn't fix the CVE indeed as you highlighted, but it is present in older versions too, so it doesn't really make it worse either.
My reason for this version bump is simply to get in sync with our downstream software and also 3.9.5 depends on slf4j-1.7.36 which is Kafka's current slf4j dependency, whereas 3.9.4 depends on slf4j-1.7.30. So in this sense it's more about aligning dependencies rather than fixing CVEs.

[viktorsomogyi]

@urbandan @akatona84 would you please review this?

[mimaison]

LGTM