Update org.apache.commons:commons-dbcp2 to version 2.12.0 (#2342)

Author: asf-rm

log4j-parent/pom.xml

@@ -99,7 +99,7 @@
     <commons-codec.version>1.16.1</commons-codec.version>
     <commons-compress.version>1.26.0</commons-compress.version>
     <commons-csv.version>1.10.0</commons-csv.version>
-    <commons-dbcp2.version>2.11.0</commons-dbcp2.version>
+    <commons-dbcp2.version>2.12.0</commons-dbcp2.version>
     <commons-io.version>2.15.1</commons-io.version>
     <commons-lang3.version>3.14.0</commons-lang3.version>
     <commons-logging.version>1.3.0</commons-logging.version>

src/changelog/.3.x.x/update_org_apache_commons_commons_dbcp2.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="http://logging.apache.org/log4j/changelog"
+       xsi:schemaLocation="http://logging.apache.org/log4j/changelog https://logging.apache.org/log4j/changelog-0.1.3.xsd"
+       type="updated">
+  <issue id="2342" link="https://github.com/apache/logging-log4j2/pull/2342"/>
+  <description format="asciidoc">Update `org.apache.commons:commons-dbcp2` to version `2.12.0`</description>
+</entry>

src/site/_release-notes/_3.x.x.adoc

@@ -26,6 +26,7 @@ This release contains...
 * Update `co.elastic.logging:log4j2-ecs-layout` to version `1.6.0` (https://github.com/apache/logging-log4j2/pull/2303[2303])
 * Update `com.github.tomakehurst:wiremock-jre8` to version `2.35.2` (https://github.com/apache/logging-log4j2/pull/2305[2305])
 * Update `org.apache.commons:commons-compress` to version `1.26.0` (https://github.com/apache/logging-log4j2/pull/2300[2300])
+* Update `org.apache.commons:commons-dbcp2` to version `2.12.0` (https://github.com/apache/logging-log4j2/pull/2342[2342])
 * Update `org.apache.tomcat:tomcat-juli` to version `10.1.19` (https://github.com/apache/logging-log4j2/pull/2302[2302])
 * Update `org.mockito:mockito-bom` to version `5.11.0` (https://github.com/apache/logging-log4j2/pull/2333[2333])
 * Update `org.mongodb:bson` to version `5.0.0` (https://github.com/apache/logging-log4j2/pull/2327[2327])