* update commons and log4j dependencies

* changelog

* rollback log4j version

* regenerated verification metadata to purge old content

Signed-off-by: Sally MacFarlane <macfarla.github@gmail.com>

---------

Signed-off-by: Sally MacFarlane <macfarla.github@gmail.com>