GH-5799: use newer logback version

[barthanssens]

GitHub issue resolved: #5799

Briefly describe the changes proposed in this PR:

• use logback 1.5.26, which fixes the CVE (in 1.5.25) and a bug when shading jars

(newer versions are available, but with an updated license, though the license compatibility should be even better: EPL v2 vs 1)

---

PR Author Checklist (see the contributor guidelines for more details):

• my pull request is self-contained
• I've added tests for the changes I made
• I've applied code formatting (you can use mvn process-resources to format from the command line)
• I've squashed my commits where necessary
• every commit message starts with the issue number (GH-xxxx) followed by a meaningful description of the change