Bump joda-time (fixes #13867) [ci drivers] (#13921)

our previous version was 2.3 and it was a transitive dep from
redhogs/cron-parser-core which doesn't sound super great.

add a dep on the most recent version

driven by ticket #13867 where emails were sending an hour early when
the TZ was Europe/Moscow. We use java.time in some parts but the pulse
sender used joda.time. Joda.time 2.3 has outdated timezone
information.

Co-authored-by: Cam Saul <github@camsaul.com>

project.clj

@@ -49,6 +49,7 @@
   [[org.clojure/clojure "1.10.1"]
    [org.clojure/core.async "0.4.500"
     :exclusions [org.clojure/tools.reader]]
+   [joda-time/joda-time "2.10.8"]
    [org.clojure/core.logic "1.0.0"]
    [org.clojure/core.match "0.3.0"]                                   ; optimized pattern matching library for Clojure
    [org.clojure/core.memoize "1.0.236"]                               ; needed by core.match; has useful FIFO, LRU, etc. caching mechanisms
@@ -117,7 +118,7 @@
    [metabase/saml20-clj "2.0.0"]                                      ; EE SAML integration
    [metabase/throttle "1.0.2"]                                        ; Tools for throttling access to API endpoints and other code pathways
    [net.redhogs.cronparser/cron-parser-core "3.4"                     ; describe Cron schedule in human-readable language
-    :exclusions [org.slf4j/slf4j-api]]
+    :exclusions [org.slf4j/slf4j-api joda-time]]                      ; exclude joda time 2.3 which has outdated timezone information
    [net.sf.cssbox/cssbox "4.12" :exclusions [org.slf4j/slf4j-api]]    ; HTML / CSS rendering
    [org.apache.commons/commons-lang3 "3.10"]                          ; helper methods for working with java.lang stuff
    [org.apache.logging.log4j/log4j-api "2.13.3"]                      ; apache logging framework