Adjust maven dependencies

[Technoboy-]

Motivation

Recently, we have upgraded log4j2 version, but find that MoP relies on log4j independently. For MoP relies on Pulsar, and Pulsar even has the log4j dependency. We need to check if we can remove log4j2 from MoP. Furthermore, some other dependencies.

[mattisonchao]

relative link : https://github.com/advisories/GHSA-fp5r-v3w9-4333