fix(security): Upgrade logback-core to resolve CVE-2025-11226

[nishithakbhaskaran]

Description

Upgrade logback-core to 1.5.19 inorder to fix CVE-2025-11226

Motivation and Context

Impact

Test Plan

Contributor checklist

• Please make sure your submission complies with our contributing guide, in particular code style and commit standards.
• PR description addresses the issue accurately and concisely. If the change is non-trivial, a GitHub Issue is referenced.
• Documented new properties (with its default value), SQL syntax, functions, or other functionality.
• If release notes are required, they follow the release notes guidelines.
• Adequate tests were added if applicable.
• CI passed.
• If adding new dependencies, verified they have an OpenSSF Scorecard score of 5.0 or higher (or obtained explicit TSC approval for lower scores).

Release Notes

Please follow release notes guidelines and fill in the release notes below.

== RELEASE NOTES ==

Security Changes
* Upgrade logback-core to 1.5.19  in response to `CVE-2025-11226 <https://github.com/advisories/GHSA-25qh-j22f-pwp8>`_. 

[steveburnett]

Thanks for the release note! Please change the formatting of the link to match the example shown in Phrasing in the Release Notes Guidelines.

[aaneja]

Can you try making the change to airbase instead - https://github.com/prestodb/airbase/pull/36/files is what I had done last time

[nishithakbhaskaran]

This will cause jdk 11 build failure in airlift repo.

[aaneja]

Ah, you're right. We still have airlift on JDK 8