Bumps log4j-web from 2.17.2 to 2.18.0.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-web
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>