This is an automated email from the ASF dual-hosted git repository.
mimaison pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/kafka.git
The following commit(s) were added to refs/heads/trunk by this push:
new df70f51a158 KAFKA-20791: Bump log4j to 2.25.5 (#22794)
df70f51a158 is described below
commit df70f51a158e505c8103e99d3a25b0e9254df363
Author: Federico Valeri <[email protected]>
AuthorDate: Thu Jul 9 15:22:45 2026 +0200
KAFKA-20791: Bump log4j to 2.25.5 (#22794)
Upgrade log4j2 from 2.25.4 to 2.25.5.
Reviewers: Mickael Maison <[email protected]>
Signed-off-by: Federico Valeri <[email protected]>
---
LICENSE-binary | 8 ++++----
gradle/dependencies.gradle | 2 +-
2 files changed, 5 insertions(+), 5 deletions(-)
diff --git a/LICENSE-binary b/LICENSE-binary
index e7060ea52c3..daa9e2664bd 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -237,10 +237,10 @@ License Version 2.0:
- jetty-util-12.0.34
- jose4j-0.9.6
- jspecify-1.0.0
-- log4j-api-2.25.4
-- log4j-core-2.25.4
-- log4j-slf4j-impl-2.25.4
-- log4j-1.2-api-2.25.4
+- log4j-api-2.25.5
+- log4j-core-2.25.5
+- log4j-slf4j-impl-2.25.5
+- log4j-1.2-api-2.25.5
- lz4-java-1.10.2
- maven-artifact-3.9.15
- metrics-core-2.2.0
diff --git a/gradle/dependencies.gradle b/gradle/dependencies.gradle
index f8571e5f34e..d1c1d74bc0e 100644
--- a/gradle/dependencies.gradle
+++ b/gradle/dependencies.gradle
@@ -109,7 +109,7 @@ versions += [
kafka_41: "4.1.2",
kafka_42: "4.2.1",
kafka_43: "4.3.1",
- log4j2: "2.25.4",
+ log4j2: "2.25.5",
// When updating lz4 make sure the compression levels in
org.apache.kafka.common.record.internal.CompressionType are still valid
//
https://github.com/apache/kafka/blob/trunk/clients/src/main/java/org/apache/kafka/common/record/internal/CompressionType.java#L73-L74
//
https://github.com/yawkat/lz4-java/blob/main/src/java/net/jpountz/lz4/LZ4Constants.java#L23-L24
