geyanggang opened a new pull request, #11054:
URL: https://github.com/apache/gravitino/pull/11054
### What changes were proposed in this pull request?
Upgrade Log4j from 2.24.3 to 2.25.4 in `gradle/libs.versions.toml`.
### Why are the changes needed?
Log4j 2.25.4 includes fixes for log injection, malformed XML/JSON output,
and improved configuration attribute handling. Keeping dependencies up to date
reduces the surface area flagged by security scanners and ensures we benefit
from upstream bug fixes.
Gravitino uses only standard PatternLayout with common date patterns
(`%d{yyyy-MM-dd HH:mm:ss.SSS}`), so the behavioral changes introduced in 2.25.0
(date formatting, exception converter defaults) do not affect the project.
Fix: #11053
### Does this PR introduce _any_ user-facing change?
No. The logging output format remains unchanged since Gravitino uses
explicit date patterns that are compatible across versions.
### How was this patch tested?
- `./gradlew :core:test :server:test -PskipITs` — all tests pass
- `./gradlew :catalogs:hive-metastore-common:test
:iceberg:iceberg-common:test -PskipITs` — all tests pass
- Compilation verified across core, server, and api modules
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
