SpringBoot项目怎么在不改变父包版本号的情况下修改子包版

以spring-boot-starter-log4j2为例
第一种
屏蔽spring-boot-starter-log4j2的log-api和log-core包，单独引用log4j-api和log4j-core的2.15.0版本

<!-- log4j2 -->
<dependency>
    <groupId>org.springframework.boot</groupId>
    <artifactId>spring-boot-starter-log4j2</artifactId>
    <exclusions>
        <exclusion>
            <groupId>org.apache.logging.log4j</groupId>
            <artifactId>log4j-core</artifactId>
        </exclusion>
        <exclusion>
            <groupId>org.apache.logging.log4j</groupId>
            <artifactId>log4j-api</artifactId>
        </exclusion>
    </exclusions>
</dependency>
<!-- log4j-core:2.15.0修复漏洞版本 -->
<dependency>
    <groupId>org.apache.logging.log4j</groupId>
    <artifactId>log4j-api</artifactId>
    <version>2.15.0</version>
</dependency>
<dependency>
    <groupId>org.apache.logging.log4j</groupId>
    <artifactId>log4j-core</artifactId>
    <version>2.15.0</version>
</dependency>

第二种

<properties>
    <log4j2.version>2.15.0</log4j2.version>
</properties>

注意：spring boot的父项目中有引用此log42.version变量，当前工程中设置此变量覆盖父项目即可调整log4j的版本