Bump logback to a version >= 1.2.13

[tasso94]

Acceptance Criteria (Required on creation)

Bump logback to a version >= 1.2.13

Hints

Links

• https://jira.camunda.com/browse/SEC-808

Breakdown

### Pull Requests
- [ ] https://github.com/camunda/camunda-bpm-platform-maintenance/pull/1164
- [ ] https://github.com/camunda/camunda-bpm-platform-maintenance/pull/1165
- [ ] https://github.com/camunda/camunda-bpm-rpa-bridge-ee/pull/98
- [ ] https://github.com/camunda/camunda-bpm-rpa-bridge-ee/pull/99

Dev2QA handover

• [ ] Does this ticket need a QA test and the testing goals are not clear from the description? Add a Dev2QA handover comment

[yanavasileva]

https://security.snyk.io/package/maven/ch.qos.logback:logback-core

[yanavasileva]

TODO:

• [x] check correct version is picked in 7.19 CE/EE artifacts
• [x] check correct version is picked in 7.18 CE/EE artifacts
• [x] do we need to override logback-access version in Run dependency management? (Spring boot dependencies - https://github.com/spring-projects/spring-boot/blob/2.7.x/spring-boot-project/spring-boot-dependencies/build.gradle#L1173) - No, no transitive dependency to logback-access
• [x] license check

Note to myself, the following didn't do an override as I initially expected (for why check build.gradle link above):

<properties>
  <logback.version>${version.logback}</logback.version>
</properties>

[yanavasileva]

To reviewer:

• We want to include in the patch scheduled for next week. Could you have a look today or tomorrow?

[yanavasileva]

reopened to bump the version in RPA bridge as well