Upgrade log4j in Spring Boot with maven

You are using spring boot parent version 2.5.1 that is why it is downloading log4j 2.14.1 by default during the build. There are no other conflicts with any of the other dependencies in your pom.xml so try the latest spring boot starter-parent version.

<parent>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-parent</artifactId>
    <version>2.6.2</version>
    <relativePath /> <!-- lookup parent from repository -->
</parent>