Bump up log4j version to 2.17 and add release notes

[kjoseph07]

Is your feature request related to a problem? Please provide an existing Issue # , or describe.
A clear and concise description of what the problem is. Ex. I'm always frustrated when [...]

Describe the solution you are proposing
A clear and concise description of what you want to happen.

Describe alternatives you've considered
A clear and concise description of any alternative solutions or features you've considered.

Additional context
Add any other context or screenshots about the feature request here.

Check List

• New functionality includes testing.
  • All tests pass
• New functionality has been documented.
  • New functionality has javadoc added
• Commits are signed per the DCO using --signoff

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[codecov-commenter]

Codecov Report

Merging #111 (fcc539d) into 1.2 (ab9c573) will not change coverage.
The diff coverage is n/a.

@@            Coverage Diff            @@
##                1.2     #111   +/-   ##
=========================================
  Coverage     72.19%   72.19%           
  Complexity      356      356           
=========================================
  Files            44       44           
  Lines          2510     2510           
  Branches        160      160           
=========================================
  Hits           1812     1812           
  Misses          592      592           
  Partials        106      106           

---

Continue to review full report at Codecov.

Legend - Click here to learn more
Δ = absolute <relative> (impact), ø = not affected, ? = missing data
Powered by Codecov. Last update ab9c573...fcc539d. Read the comment docs.

[peterzhuamazon]

Thanks.