This is an automated email from the ASF dual-hosted git repository.
diqiu50 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/gravitino.git
The following commit(s) were added to refs/heads/main by this push:
new a4ff285252 [#11053] improvement(deps): Upgrade Log4j from 2.24.3 to
2.25.4 (#11054)
a4ff285252 is described below
commit a4ff285252e098f502fde34b7a418457c9a99831
Author: geyanggang <[email protected]>
AuthorDate: Tue May 12 20:41:15 2026 +0800
[#11053] improvement(deps): Upgrade Log4j from 2.24.3 to 2.25.4 (#11054)
### What changes were proposed in this pull request?
Upgrade Log4j from 2.24.3 to 2.25.4 in `gradle/libs.versions.toml`.
### Why are the changes needed?
Log4j 2.25.4 includes fixes for log injection, malformed XML/JSON
output, and improved configuration attribute handling. Keeping
dependencies up to date reduces the surface area flagged by security
scanners and ensures we benefit from upstream bug fixes.
Gravitino uses only standard PatternLayout with common date patterns
(`%d{yyyy-MM-dd HH:mm:ss.SSS}`), so the behavioral changes introduced in
2.25.0 (date formatting, exception converter defaults) do not affect the
project.
Fix: #11053
### Does this PR introduce _any_ user-facing change?
No. The logging output format remains unchanged since Gravitino uses
explicit date patterns that are compatible across versions.
### How was this patch tested?
- `./gradlew :core:test :server:test -PskipITs` — all tests pass
- `./gradlew :catalogs:hive-metastore-common:test
:iceberg:iceberg-common:test -PskipITs` — all tests pass
- Compilation verified across core, server, and api modules
---
gradle/libs.versions.toml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index f2e6707689..94f6196eb8 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -27,7 +27,7 @@ jackson = "2.15.2"
guava = "32.1.3-jre"
lombok = "1.18.20"
slf4j = "2.0.16"
-log4j = "2.24.3"
+log4j = "2.25.4"
lance = "2.0.1"
lance-namespace = "0.4.5"
delta-kernel = "3.3.0"
