dependency updates for log4j, slf4j, commons-io and hsqldb