REP-946 Upgrade to Log4j 2.x

These are in the dependency management section.
Should I remove the scoping?