Bump reload4j to 1.2.18.1

This release includes a number of additional security fixes. More
details can be found on their mailing list [1].

[1] http://mailman.qos.ch/pipermail/reload4j/2022-January/000033.html

Change-Id: I41e911e0d431ed65504ebda0ed52f3161f47a3a2
diff --git a/tools/nongoogle.bzl b/tools/nongoogle.bzl
index 394cf0e..5ae1f4c 100644
--- a/tools/nongoogle.bzl
+++ b/tools/nongoogle.bzl
@@ -11,8 +11,8 @@
 
     maven_jar(
         name = "log4j",
-        artifact = "ch.qos.reload4j:reload4j:1.2.18.0",
-        sha1 = "03b2b708403ab00eb0678bffdbbd567070bbdfab",
+        artifact = "ch.qos.reload4j:reload4j:1.2.18.1",
+        sha1 = "7075022a11e18c1ad230de5be074e0c691fed17b",
     )
 
     maven_jar(