Bump log4j-api from 2.15.0 to 2.16.0

Bumps log4j-api from 2.15.0 to 2.16.0.

[](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

You can trigger a rebase of this PR by commenting `@dependabot rebase`.

//: # (dependabot-automerge-start)
//: # (dependabot-automerge-end)

—

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:

• `@dependabot rebase` will rebase this PR
• `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
• `@dependabot merge` will merge this PR after your CI passes on it
• `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
• `@dependabot cancel merge` will cancel a previously requested merge and block automerging
• `@dependabot reopen` will reopen this PR if it is closed
• `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>