This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/logging-log4j-samples.git
The following commit(s) were added to refs/heads/main by this push:
new f5062b7 Bump the all group across 2 directories with 26 updates (#403)
f5062b7 is described below
commit f5062b7ae001a22236573568dd5f8fc529d47cb5
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Sat Jul 25 11:52:46 2026 +0200
Bump the all group across 2 directories with 26 updates (#403)
* Bump the all group across 2 directories with 26 updates
Bumps the all group with 19 updates in the / directory:
| Package | From | To |
| --- | --- | --- |
|
[com.google.errorprone:error_prone_annotations](https://github.com/google/error-prone)
| `2.44.0` | `2.50.0` |
| [com.google.guava:guava](https://github.com/google/guava) | `33.5.0-jre`
| `33.6.0-jre` |
| [joda-time:joda-time](https://github.com/JodaOrg/joda-time) | `2.14.0` |
`2.14.2` |
| [org.yaml:snakeyaml](https://bitbucket.org/snakeyaml/snakeyaml) | `2.5` |
`2.6` |
|
[com.github.spotbugs:spotbugs-annotations](https://github.com/spotbugs/spotbugs)
| `4.9.8` | `4.10.3` |
| [org.jetbrains.kotlin:kotlin-bom](https://github.com/JetBrains/kotlin) |
`2.2.21` | `2.4.10` |
|
[com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) |
`2.20.1` | `2.22.1` |
|
[org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2)
| `2.25.2` | `2.26.1` |
| org.apache.logging.log4j:log4j-core | `2.25.2` | `2.26.1` |
| [org.slf4j:slf4j-bom](https://github.com/qos-ch/slf4j) | `2.0.17` |
`2.0.18` |
|
[org.springframework.boot:spring-boot-dependencies](https://github.com/spring-projects/spring-boot)
| `3.5.7` | `4.1.0` |
|
[org.springframework.boot:spring-boot-maven-plugin](https://github.com/spring-projects/spring-boot)
| `3.5.7` | `4.1.0` |
|
[org.springframework.cloud:spring-cloud-dependencies](https://github.com/spring-cloud/spring-cloud-release)
| `2025.0.0` | `2025.1.2` |
| [org.aspectj:aspectjweaver](https://github.com/eclipse/org.aspectj) |
`1.9.25` | `1.9.25.1` |
| [org.aspectj:aspectjrt](https://github.com/eclipse/org.aspectj) |
`1.9.25` | `1.9.25.1` |
| [org.aspectj:aspectjtools](https://github.com/eclipse/org.aspectj) |
`1.9.25` | `1.9.25.1` |
|
[org.codehaus.mojo:aspectj-maven-plugin](https://github.com/mojohaus/aspectj-maven-plugin)
| `1.15.0` | `1.16.0` |
|
[org.apache.maven.plugins:maven-jlink-plugin](https://github.com/apache/maven-jlink-plugin)
| `3.2.0` | `3.3.0` |
|
[io.fabric8:kubernetes-client-bom](https://github.com/fabric8io/kubernetes-client)
| `7.4.0` | `7.8.0` |
Bumps the all group with 9 updates in the /log4j-samples-graalvm directory:
| Package | From | To |
| --- | --- | --- |
|
[org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2)
| `2.25.2` | `2.26.1` |
| [org.slf4j:slf4j-bom](https://github.com/qos-ch/slf4j) | `2.0.17` |
`2.0.18` |
|
[org.codehaus.mojo:exec-maven-plugin](https://github.com/mojohaus/exec-maven-plugin)
| `3.6.2` | `3.6.3` |
| [org.assertj:assertj-bom](https://github.com/assertj/assertj) | `3.27.6`
| `3.27.7` |
| [org.junit:junit-bom](https://github.com/junit-team/junit-framework) |
`6.0.1` | `6.1.2` |
| [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) |
`1.5.20` | `1.6.0` |
| [org.json:json](https://github.com/douglascrockford/JSON-java) |
`20250517` | `20260719` |
|
[net.javacrumbs.json-unit:json-unit-assertj](https://github.com/lukas-krecan/JsonUnit)
| `5.0.0` | `6.0.1` |
|
[org.graalvm.buildtools:native-maven-plugin](https://github.com/graalvm/native-build-tools)
| `0.11.2` | `1.1.6` |
Updates `com.google.errorprone:error_prone_annotations` from 2.44.0 to
2.50.0
- [Release notes](https://github.com/google/error-prone/releases)
- [Commits](https://github.com/google/error-prone/compare/v2.44.0...v2.50.0)
Updates `com.google.guava:guava` from 33.5.0-jre to 33.6.0-jre
- [Release notes](https://github.com/google/guava/releases)
- [Commits](https://github.com/google/guava/commits)
Updates `joda-time:joda-time` from 2.14.0 to 2.14.2
- [Release notes](https://github.com/JodaOrg/joda-time/releases)
-
[Changelog](https://github.com/JodaOrg/joda-time/blob/main/RELEASE-NOTES.txt)
- [Commits](https://github.com/JodaOrg/joda-time/compare/v2.14.0...v2.14.2)
Updates `org.yaml:snakeyaml` from 2.5 to 2.6
-
[Commits](https://bitbucket.org/snakeyaml/snakeyaml/branches/compare/snakeyaml-2.6..snakeyaml-2.5)
Updates `com.github.spotbugs:spotbugs-annotations` from 4.9.8 to 4.10.3
- [Release notes](https://github.com/spotbugs/spotbugs/releases)
- [Changelog](https://github.com/spotbugs/spotbugs/blob/master/CHANGELOG.md)
- [Commits](https://github.com/spotbugs/spotbugs/compare/4.9.8...4.10.3)
Updates `org.jetbrains.kotlin:kotlin-bom` from 2.2.21 to 2.4.10
- [Release notes](https://github.com/JetBrains/kotlin/releases)
- [Changelog](https://github.com/JetBrains/kotlin/blob/master/ChangeLog.md)
- [Commits](https://github.com/JetBrains/kotlin/compare/v2.2.21...v2.4.10)
Updates `com.fasterxml.jackson:jackson-bom` from 2.20.1 to 2.22.1
-
[Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.20.1...jackson-bom-2.22.1)
Updates `org.apache.logging.log4j:log4j-bom` from 2.25.2 to 2.26.1
- [Release notes](https://github.com/apache/logging-log4j2/releases)
-
[Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc)
-
[Commits](https://github.com/apache/logging-log4j2/compare/rel/2.25.2...rel/2.26.1)
Updates `org.apache.logging.log4j:log4j-core` from 2.25.2 to 2.26.1
Updates `org.slf4j:slf4j-bom` from 2.0.17 to 2.0.18
- [Release notes](https://github.com/qos-ch/slf4j/releases)
- [Commits](https://github.com/qos-ch/slf4j/compare/v_2.0.17...v_2.0.18)
Updates `org.springframework.boot:spring-boot-dependencies` from 3.5.7 to
4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
-
[Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.7...v4.1.0)
Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.7 to
4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
-
[Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.7...v4.1.0)
Updates `org.springframework.cloud:spring-cloud-dependencies` from 2025.0.0
to 2025.1.2
- [Release
notes](https://github.com/spring-cloud/spring-cloud-release/releases)
-
[Changelog](https://github.com/spring-cloud/spring-cloud-release/blob/main/release-train-settings.xml)
-
[Commits](https://github.com/spring-cloud/spring-cloud-release/compare/v2025.0.0...v2025.1.2)
Updates `org.apache.logging.log4j:log4j-core` from 2.25.2 to 2.26.1
Updates `org.springframework.boot:spring-boot-maven-plugin` from 3.5.7 to
4.1.0
- [Release notes](https://github.com/spring-projects/spring-boot/releases)
-
[Commits](https://github.com/spring-projects/spring-boot/compare/v3.5.7...v4.1.0)
Updates `org.aspectj:aspectjweaver` from 1.9.25 to 1.9.25.1
- [Release notes](https://github.com/eclipse/org.aspectj/releases)
- [Commits](https://github.com/eclipse/org.aspectj/commits)
Updates `org.aspectj:aspectjrt` from 1.9.25 to 1.9.25.1
- [Release notes](https://github.com/eclipse/org.aspectj/releases)
- [Commits](https://github.com/eclipse/org.aspectj/commits)
Updates `org.aspectj:aspectjtools` from 1.9.25 to 1.9.25.1
- [Release notes](https://github.com/eclipse/org.aspectj/releases)
- [Commits](https://github.com/eclipse/org.aspectj/commits)
Updates `org.aspectj:aspectjrt` from 1.9.25 to 1.9.25.1
- [Release notes](https://github.com/eclipse/org.aspectj/releases)
- [Commits](https://github.com/eclipse/org.aspectj/commits)
Updates `org.aspectj:aspectjtools` from 1.9.25 to 1.9.25.1
- [Release notes](https://github.com/eclipse/org.aspectj/releases)
- [Commits](https://github.com/eclipse/org.aspectj/commits)
Updates `org.codehaus.mojo:aspectj-maven-plugin` from 1.15.0 to 1.16.0
- [Release notes](https://github.com/mojohaus/aspectj-maven-plugin/releases)
-
[Commits](https://github.com/mojohaus/aspectj-maven-plugin/compare/aspectj-maven-plugin-1.15.0...aspectj-maven-plugin-1.16.0)
Updates `org.apache.maven.plugins:maven-jlink-plugin` from 3.2.0 to 3.3.0
- [Release notes](https://github.com/apache/maven-jlink-plugin/releases)
-
[Commits](https://github.com/apache/maven-jlink-plugin/compare/maven-jlink-plugin-3.2.0...maven-jlink-plugin-3.3.0)
Updates `io.fabric8:kubernetes-client-bom` from 7.4.0 to 7.8.0
- [Release notes](https://github.com/fabric8io/kubernetes-client/releases)
-
[Changelog](https://github.com/fabric8io/kubernetes-client/blob/main/CHANGELOG.md)
-
[Commits](https://github.com/fabric8io/kubernetes-client/compare/v7.4.0...v7.8.0)
Updates `org.slf4j:slf4j-bom` from 2.0.17 to 2.0.18
- [Release notes](https://github.com/qos-ch/slf4j/releases)
- [Commits](https://github.com/qos-ch/slf4j/compare/v_2.0.17...v_2.0.18)
Updates `org.apache.logging.log4j:log4j-core` from 2.25.2 to 2.26.1
Updates `org.apache.logging.log4j:log4j-bom` from 2.25.2 to 2.26.1
- [Release notes](https://github.com/apache/logging-log4j2/releases)
-
[Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc)
-
[Commits](https://github.com/apache/logging-log4j2/compare/rel/2.25.2...rel/2.26.1)
Updates `org.slf4j:slf4j-bom` from 2.0.17 to 2.0.18
- [Release notes](https://github.com/qos-ch/slf4j/releases)
- [Commits](https://github.com/qos-ch/slf4j/compare/v_2.0.17...v_2.0.18)
Updates `org.codehaus.mojo:exec-maven-plugin` from 3.6.2 to 3.6.3
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
-
[Commits](https://github.com/mojohaus/exec-maven-plugin/compare/3.6.2...3.6.3)
Updates `org.assertj:assertj-bom` from 3.27.6 to 3.27.7
- [Release notes](https://github.com/assertj/assertj/releases)
-
[Commits](https://github.com/assertj/assertj/compare/assertj-build-3.27.6...assertj-build-3.27.7)
Updates `org.junit:junit-bom` from 6.0.1 to 6.1.2
- [Release notes](https://github.com/junit-team/junit-framework/releases)
-
[Commits](https://github.com/junit-team/junit-framework/compare/r6.0.1...r6.1.2)
Updates `org.apache.logging.log4j:log4j-bom` from 2.25.2 to 2.26.1
- [Release notes](https://github.com/apache/logging-log4j2/releases)
-
[Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc)
-
[Commits](https://github.com/apache/logging-log4j2/compare/rel/2.25.2...rel/2.26.1)
Updates `org.slf4j:slf4j-bom` from 2.0.17 to 2.0.18
- [Release notes](https://github.com/qos-ch/slf4j/releases)
- [Commits](https://github.com/qos-ch/slf4j/compare/v_2.0.17...v_2.0.18)
Updates `ch.qos.logback:logback-classic` from 1.5.20 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.5.20...v_1.6.0)
Updates `org.json:json` from 20250517 to 20260719
- [Release notes](https://github.com/douglascrockford/JSON-java/releases)
-
[Changelog](https://github.com/stleary/JSON-java/blob/master/docs/RELEASES.md)
-
[Commits](https://github.com/douglascrockford/JSON-java/compare/20250517...20260719)
Updates `net.javacrumbs.json-unit:json-unit-assertj` from 5.0.0 to 6.0.1
-
[Changelog](https://github.com/lukas-krecan/JsonUnit/blob/master/RELEASES.md)
-
[Commits](https://github.com/lukas-krecan/JsonUnit/compare/json-unit-parent-5.0.0...json-unit-parent-6.0.1)
Updates `org.graalvm.buildtools:native-maven-plugin` from 0.11.2 to 1.1.6
- [Release notes](https://github.com/graalvm/native-build-tools/releases)
-
[Commits](https://github.com/graalvm/native-build-tools/compare/0.11.2...1.1.6)
Updates `org.codehaus.mojo:exec-maven-plugin` from 3.6.2 to 3.6.3
- [Release notes](https://github.com/mojohaus/exec-maven-plugin/releases)
-
[Commits](https://github.com/mojohaus/exec-maven-plugin/compare/3.6.2...3.6.3)
---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
dependency-version: 1.5.34
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: com.fasterxml.jackson:jackson-bom
dependency-version: 2.22.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: com.github.spotbugs:spotbugs-annotations
dependency-version: 4.10.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: com.google.errorprone:error_prone_annotations
dependency-version: 2.50.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: com.google.guava:guava
dependency-version: 33.6.0-jre
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: io.fabric8:kubernetes-client-bom
dependency-version: 7.7.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: joda-time:joda-time
dependency-version: 2.14.2
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: net.javacrumbs.json-unit:json-unit-assertj
dependency-version: 5.1.2
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: org.apache.logging.log4j:log4j-bom
dependency-version: 2.26.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: org.apache.logging.log4j:log4j-bom
dependency-version: 2.26.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: org.apache.logging.log4j:log4j-bom
dependency-version: 2.26.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: org.apache.logging.log4j:log4j-core
dependency-version: 2.26.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: org.apache.logging.log4j:log4j-core
dependency-version: 2.26.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: org.apache.logging.log4j:log4j-core
dependency-version: 2.26.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: org.apache.maven.plugins:maven-jlink-plugin
dependency-version: 3.3.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: org.aspectj:aspectjrt
dependency-version: 1.9.25.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: org.aspectj:aspectjrt
dependency-version: 1.9.25.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: org.aspectj:aspectjtools
dependency-version: 1.9.25.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: org.aspectj:aspectjtools
dependency-version: 1.9.25.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: org.aspectj:aspectjweaver
dependency-version: 1.9.25.1
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: org.assertj:assertj-bom
dependency-version: 3.27.7
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: org.codehaus.mojo:aspectj-maven-plugin
dependency-version: 1.16.0
dependency-type: direct:development
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: org.codehaus.mojo:exec-maven-plugin
dependency-version: 3.6.3
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: org.codehaus.mojo:exec-maven-plugin
dependency-version: 3.6.3
dependency-type: direct:development
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: org.graalvm.buildtools:native-maven-plugin
dependency-version: 1.1.2
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: all
- dependency-name: org.jetbrains.kotlin:kotlin-bom
dependency-version: 2.4.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: org.json:json
dependency-version: '20260522'
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: all
- dependency-name: org.junit:junit-bom
dependency-version: 6.1.0
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: org.slf4j:slf4j-bom
dependency-version: 2.0.18
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: org.slf4j:slf4j-bom
dependency-version: 2.0.18
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: org.slf4j:slf4j-bom
dependency-version: 2.0.18
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: org.slf4j:slf4j-bom
dependency-version: 2.0.18
dependency-type: direct:production
update-type: version-update:semver-patch
dependency-group: all
- dependency-name: org.springframework.boot:spring-boot-dependencies
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: all
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: all
- dependency-name: org.springframework.boot:spring-boot-maven-plugin
dependency-version: 4.1.0
dependency-type: direct:production
update-type: version-update:semver-major
dependency-group: all
- dependency-name: org.springframework.cloud:spring-cloud-dependencies
dependency-version: 2025.1.2
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
- dependency-name: org.yaml:snakeyaml
dependency-version: '2.6'
dependency-type: direct:production
update-type: version-update:semver-minor
dependency-group: all
...
Signed-off-by: dependabot[bot] <[email protected]>
* Bump default Log4j version to 2.26.1 and workflow snapshots to
2.27.0-SNAPSHOT
Update the default Log4j version users get in the Gradle samples
(gradle.properties) to the latest stable release 2.26.1, matching the
Maven POMs. Point the log4j-version defaults of the reusable and
integration test workflows to the current development snapshot,
2.27.0-SNAPSHOT.
Assisted-By: Claude Fable 5 <[email protected]>
* Fix build after dependency updates and revert Spring Boot bump
Revert the Spring Boot 4.1.0 and Spring Cloud 2025.1.2 bumps to 3.5.7
and 2025.0.0: the upgrade to Spring Boot 4 requires code changes that
will be delivered separately.
Fix the remaining fallout of the dependency updates:
- Manage `org.osgi.annotation.bundle`, since `logging-parent` 12.x no
longer manages annotation dependencies.
- Add JSpecify, which `log4j-api` 2.26.1 packages reference, as a
provided dependency to the WAR samples, so their OSGi metadata can
import the annotations package instead of flagging it as a private
reference.
- Import `netty-bom` in the Spring Cloud sample application, since
`kubernetes-client` 7.8.0 requires a more recent Netty than the one
managed by `spring-boot-dependencies` 3.5.7.
- Group the entries of `dependencyManagement` in the root POM into
IDE-foldable regions.
Assisted-By: Claude Fable 5 <[email protected]>
* Downgrade native-maven-plugin to 1.1.5
Version 1.1.6 fails under Maven 3 with a missing
`org.apache.maven.shared.utils.logging.MessageUtils` class, because the
plugin directly references an internal Maven API that is not available
in the plugin class realm. The problem will be fixed in version 1.1.7.
Manage the plugin version through a property in `pluginManagement`, so
the constraint is documented and applied in one place.
See: https://github.com/graalvm/native-build-tools/issues/1000
Assisted-By: Claude Fable 5 <[email protected]>
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Piotr P. Karwasz <[email protected]>
---
.github/workflows/graalvm-reusable-test.yaml | 2 +-
.github/workflows/gradle-reusable-test.yaml | 2 +-
.github/workflows/integration-test.yaml | 4 +-
gradle.properties | 2 +-
log4j-samples-aspectj/pom.xml | 4 +-
log4j-samples-flume-embedded/pom.xml | 5 ++
log4j-samples-flume-remote/pom.xml | 5 ++
log4j-samples-graalvm/pom.xml | 40 +++++++++----
log4j-samples-jlink/pom.xml | 2 +-
.../pom.xml | 15 ++++-
pom.xml | 70 ++++++++++++----------
11 files changed, 101 insertions(+), 50 deletions(-)
diff --git a/.github/workflows/graalvm-reusable-test.yaml
b/.github/workflows/graalvm-reusable-test.yaml
index 19c51f6..6f0effd 100644
--- a/.github/workflows/graalvm-reusable-test.yaml
+++ b/.github/workflows/graalvm-reusable-test.yaml
@@ -24,7 +24,7 @@ on:
description: Version of Log4j Core
type: string
# Should point to the current 2.x snapshot version
- default: 2.25.0-SNAPSHOT
+ default: 2.27.0-SNAPSHOT
log4j-repository-url:
description: Staging Maven repository. Should be empty for snapshots.
type: string
diff --git a/.github/workflows/gradle-reusable-test.yaml
b/.github/workflows/gradle-reusable-test.yaml
index 86a047e..2377e06 100644
--- a/.github/workflows/gradle-reusable-test.yaml
+++ b/.github/workflows/gradle-reusable-test.yaml
@@ -24,7 +24,7 @@ on:
description: Version of Log4j Core
type: string
# Should point to the current 2.x snapshot version
- default: 2.25.0-SNAPSHOT
+ default: 2.27.0-SNAPSHOT
log4j-repository-url:
description: Staging Maven repository. Should be empty for snapshots.
type: string
diff --git a/.github/workflows/integration-test.yaml
b/.github/workflows/integration-test.yaml
index 2bafdf6..bca169c 100644
--- a/.github/workflows/integration-test.yaml
+++ b/.github/workflows/integration-test.yaml
@@ -24,7 +24,7 @@ on:
description: Version of Log4j Core
type: string
# Should point to the current 2.x snapshot version
- default: 2.26.0-SNAPSHOT
+ default: 2.27.0-SNAPSHOT
log4j-repository-url:
description: Staging Maven repository. Should be empty for snapshots.
type: string
@@ -38,7 +38,7 @@ on:
log4j-version:
description: Version of Log4j Core
# Should point to the current 2.x snapshot version
- default: 2.25.0-SNAPSHOT
+ default: 2.27.0-SNAPSHOT
log4j-repository-url:
description: Staging Maven repository. Should be empty for snapshots.
default: ''
diff --git a/gradle.properties b/gradle.properties
index 5aa3343..52d79d8 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -26,7 +26,7 @@ android.useAndroidX = true
# Version of Log4j Core
#
# Default: last stable 2.x release
-log4jVersion = 2.25.1
+log4jVersion = 2.26.1
##
# Staging Maven Repository
diff --git a/log4j-samples-aspectj/pom.xml b/log4j-samples-aspectj/pom.xml
index 8e8d860..7c904bd 100644
--- a/log4j-samples-aspectj/pom.xml
+++ b/log4j-samples-aspectj/pom.xml
@@ -32,7 +32,7 @@
<log4j2.version>${log4j.version}</log4j2.version>
<!-- Dependency versions -->
- <aspectj.version>1.9.25</aspectj.version>
+ <aspectj.version>1.9.25.1</aspectj.version>
</properties>
<dependencies>
@@ -113,7 +113,7 @@
<plugin>
<groupId>org.codehaus.mojo</groupId>
<artifactId>aspectj-maven-plugin</artifactId>
- <version>1.15.0</version>
+ <version>1.16.0</version>
<dependencies>
<dependency>
<groupId>org.aspectj</groupId>
diff --git a/log4j-samples-flume-embedded/pom.xml
b/log4j-samples-flume-embedded/pom.xml
index ea18632..45dfa51 100644
--- a/log4j-samples-flume-embedded/pom.xml
+++ b/log4j-samples-flume-embedded/pom.xml
@@ -26,6 +26,11 @@
<packaging>war</packaging>
<name>Apache Log4j Samples: Flume - Embedded</name>
<dependencies>
+ <dependency>
+ <groupId>org.jspecify</groupId>
+ <artifactId>jspecify</artifactId>
+ <scope>provided</scope>
+ </dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-api</artifactId>
diff --git a/log4j-samples-flume-remote/pom.xml
b/log4j-samples-flume-remote/pom.xml
index d60b9a1..b24b7be 100644
--- a/log4j-samples-flume-remote/pom.xml
+++ b/log4j-samples-flume-remote/pom.xml
@@ -26,6 +26,11 @@
<packaging>war</packaging>
<name>Apache Log4j Samples: Flume - Remote</name>
<dependencies>
+ <dependency>
+ <groupId>org.jspecify</groupId>
+ <artifactId>jspecify</artifactId>
+ <scope>provided</scope>
+ </dependency>
<dependency>
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-api</artifactId>
diff --git a/log4j-samples-graalvm/pom.xml b/log4j-samples-graalvm/pom.xml
index e962ab4..60dd639 100644
--- a/log4j-samples-graalvm/pom.xml
+++ b/log4j-samples-graalvm/pom.xml
@@ -36,7 +36,7 @@
~ Set to latest stable 2.x release for users.
~ Our workflows override this.
-->
- <log4j.version>2.25.2</log4j.version>
+ <log4j.version>2.26.1</log4j.version>
<!-- Some samples require JDK 9+ -->
<minimalJavaBuildVersion>17</minimalJavaBuildVersion>
@@ -59,12 +59,22 @@
<revision>0.0.0-SNAPSHOT</revision>
<!-- Dependencies (alphabetical) -->
- <assertj.version>3.27.6</assertj.version>
- <json-org.version>20250517</json-org.version>
- <json-unit.version>5.0.0</json-unit.version>
- <junit.version>6.0.1</junit.version>
- <logback.version>1.5.20</logback.version>
- <slf4j.version>2.0.17</slf4j.version>
+ <assertj.version>3.27.7</assertj.version>
+ <json-org.version>20260719</json-org.version>
+ <json-unit.version>6.0.1</json-unit.version>
+ <junit.version>6.1.2</junit.version>
+ <logback.version>1.6.0</logback.version>
+ <slf4j.version>2.0.18</slf4j.version>
+
+ <!-- Maven plugins (alphabetical) -->
+ <!--
+ ~ Do not upgrade to 1.1.6: it references an internal Maven API
+ ~ that is not available in the plugin class realm.
+ ~ The problem will be fixed in 1.1.7.
+ ~
+ ~ See: https://github.com/graalvm/native-build-tools/issues/1000
+ -->
+ <native-maven-plugin.version>1.1.5</native-maven-plugin.version>
<!-- IT to run for each profile -->
<integration-tests-include>none</integration-tests-include>
@@ -168,6 +178,17 @@
</repositories>
<build>
+ <pluginManagement>
+ <plugins>
+
+ <plugin>
+ <groupId>org.graalvm.buildtools</groupId>
+ <artifactId>native-maven-plugin</artifactId>
+ <version>${native-maven-plugin.version}</version>
+ </plugin>
+
+ </plugins>
+ </pluginManagement>
<plugins>
<!--
@@ -274,7 +295,6 @@
<plugin>
<groupId>org.graalvm.buildtools</groupId>
<artifactId>native-maven-plugin</artifactId>
- <version>0.11.2</version>
<extensions>true</extensions>
<executions>
<execution>
@@ -327,7 +347,7 @@
<plugin>
<groupId>org.codehaus.mojo</groupId>
<artifactId>exec-maven-plugin</artifactId>
- <version>3.6.2</version>
+ <version>3.6.3</version>
<executions>
<execution>
<id>run-executable</id>
@@ -432,7 +452,6 @@
<plugin>
<groupId>org.graalvm.buildtools</groupId>
<artifactId>native-maven-plugin</artifactId>
- <version>0.11.2</version>
<extensions>true</extensions>
<executions>
<execution>
@@ -527,7 +546,6 @@
<plugin>
<groupId>org.graalvm.buildtools</groupId>
<artifactId>native-maven-plugin</artifactId>
- <version>0.11.2</version>
<extensions>true</extensions>
<executions>
<execution>
diff --git a/log4j-samples-jlink/pom.xml b/log4j-samples-jlink/pom.xml
index 975fea8..b1ecde8 100644
--- a/log4j-samples-jlink/pom.xml
+++ b/log4j-samples-jlink/pom.xml
@@ -28,7 +28,7 @@
<name>Apache Log4j Samples: JLink custom JRE</name>
<properties>
- <maven-jlink-plugin.version>3.2.0</maven-jlink-plugin.version>
+ <maven-jlink-plugin.version>3.3.0</maven-jlink-plugin.version>
<!-- Base path for the launcher created by jlink -->
<jlink.launcher.path>${project.build.directory}/maven-jlink/default/bin/log4j-samples-jlink</jlink.launcher.path>
<!-- Defaults for Unix/macOS -->
diff --git a/log4j-spring-cloud-config-sample-application/pom.xml
b/log4j-spring-cloud-config-sample-application/pom.xml
index a2f0a59..9d89590 100644
--- a/log4j-spring-cloud-config-sample-application/pom.xml
+++ b/log4j-spring-cloud-config-sample-application/pom.xml
@@ -38,12 +38,25 @@
<project.build.outputTimestamp>2023-09-14T15:03:45Z</project.build.outputTimestamp>
<!-- Dependency versions -->
- <kubernetes-client.version>7.4.0</kubernetes-client.version>
+ <kubernetes-client.version>7.8.0</kubernetes-client.version>
+ <netty.version>4.1.135.Final</netty.version>
</properties>
<dependencyManagement>
<dependencies>
+ <!--
+ ~ `kubernetes-client` requires a more recent version of Netty
+ ~ than the one managed by `spring-boot-dependencies`.
+ -->
+ <dependency>
+ <groupId>io.netty</groupId>
+ <artifactId>netty-bom</artifactId>
+ <version>${netty.version}</version>
+ <type>pom</type>
+ <scope>import</scope>
+ </dependency>
+
<dependency>
<groupId>io.fabric8</groupId>
<artifactId>kubernetes-client-bom</artifactId>
diff --git a/pom.xml b/pom.xml
index d50b1e1..f298571 100644
--- a/pom.xml
+++ b/pom.xml
@@ -63,7 +63,7 @@
~ Set to latest stable 2.x release for users.
~ Our workflows override this.
-->
- <log4j.version>2.25.2</log4j.version>
+ <log4j.version>2.26.1</log4j.version>
<!-- Some samples require JDK 17+ -->
<minimalJavaBuildVersion>17</minimalJavaBuildVersion>
@@ -89,26 +89,28 @@
<flume.version>1.11.0</flume.version>
<jetty.version>11.0.26</jetty.version>
<javax-jms.version>2.0.1</javax-jms.version>
- <spotbugs-annotations.version>4.9.8</spotbugs-annotations.version>
+ <jspecify.version>1.0.0</jspecify.version>
+ <osgi-annotation-bundle.version>2.0.0</osgi-annotation-bundle.version>
+ <spotbugs-annotations.version>4.10.3</spotbugs-annotations.version>
<spring-boot.version>3.5.7</spring-boot.version>
<spring-cloud.version>2025.0.0</spring-cloud.version>
<!-- Pinned transitive dependencies -->
<!-- Try removing from time to time -->
- <error_prone.version>2.44.0</error_prone.version>
- <guava.version>33.5.0-jre</guava.version>
+ <error_prone.version>2.50.0</error_prone.version>
+ <guava.version>33.6.0-jre</guava.version>
<httpclient.version>4.5.14</httpclient.version>
- <jackson.version>2.20.1</jackson.version>
- <joda-time.version>2.14.0</joda-time.version>
- <kotlin.version>2.2.21</kotlin.version>
- <snakeyaml.version>2.5</snakeyaml.version>
- <slf4j.version>2.0.17</slf4j.version>
+ <jackson.version>2.22.1</jackson.version>
+ <joda-time.version>2.14.2</joda-time.version>
+ <kotlin.version>2.4.10</kotlin.version>
+ <snakeyaml.version>2.6</snakeyaml.version>
+ <slf4j.version>2.0.18</slf4j.version>
</properties>
<dependencyManagement>
<dependencies>
- <!-- Internal dependencies -->
+ <!--region Internal dependencies-->
<dependency>
<groupId>org.apache.logging.log4j.samples</groupId>
<artifactId>log4j-samples-configuration</artifactId>
@@ -120,8 +122,9 @@
<artifactId>log4j-samples-flume-common</artifactId>
<version>${project.version}</version>
</dependency>
+ <!--endregion-->
- <!-- External dependencies -->
+ <!--region External dependencies-->
<dependency>
<groupId>com.lmax</groupId>
<artifactId>disruptor</artifactId>
@@ -176,56 +179,62 @@
<version>${javax-jms.version}</version>
</dependency>
- <!-- Transitive dependency of multiple dependencies -->
- <!-- We fix a common version -->
+ <dependency>
+ <groupId>org.jspecify</groupId>
+ <artifactId>jspecify</artifactId>
+ <version>${jspecify.version}</version>
+ </dependency>
+
+ <dependency>
+ <groupId>org.osgi</groupId>
+ <artifactId>org.osgi.annotation.bundle</artifactId>
+ <version>${osgi-annotation-bundle.version}</version>
+ </dependency>
+
+ <dependency>
+ <groupId>com.github.spotbugs</groupId>
+ <artifactId>spotbugs-annotations</artifactId>
+ <version>${spotbugs-annotations.version}</version>
+ </dependency>
+ <!--endregion-->
+
+ <!--region Pinned transitive dependencies-->
+ <!-- Transitive dependencies of multiple dependencies: we fix a common
version. -->
+ <!-- Try removing from time to time. -->
<dependency>
<groupId>com.google.errorprone</groupId>
<artifactId>error_prone_annotations</artifactId>
<version>${error_prone.version}</version>
</dependency>
- <!-- Transitive dependency of multiple dependencies -->
- <!-- We fix a common version -->
<dependency>
<groupId>com.google.guava</groupId>
<artifactId>guava</artifactId>
<version>${guava.version}</version>
</dependency>
- <!-- Transitive dependency of multiple dependencies -->
- <!-- We fix a common version -->
<dependency>
<groupId>org.apache.httpcomponents</groupId>
<artifactId>httpclient</artifactId>
<version>${httpclient.version}</version>
</dependency>
- <!-- Transitive dependency of multiple dependencies -->
- <!-- We fix a common version -->
<dependency>
<groupId>joda-time</groupId>
<artifactId>joda-time</artifactId>
<version>${joda-time.version}</version>
</dependency>
- <!-- Transitive dependency of multiple dependencies -->
- <!-- We fix a common version -->
<dependency>
<groupId>org.yaml</groupId>
<artifactId>snakeyaml</artifactId>
<version>${snakeyaml.version}</version>
</dependency>
+ <!--endregion-->
- <dependency>
- <groupId>com.github.spotbugs</groupId>
- <artifactId>spotbugs-annotations</artifactId>
- <version>${spotbugs-annotations.version}</version>
- </dependency>
-
+ <!--region BOMs-->
<!--
- ~ BOMs
- ~
- ~ BOMs are placed at the end, to they don't override the versions
above.
+ ~ BOMs are placed at the end, so they don't override the versions
above.
~ This is especially important for the very opinionated
`spring-boot-dependencies`.
-->
<!-- Transitive dependency of multiple dependencies -->
@@ -281,6 +290,7 @@
<type>pom</type>
<scope>import</scope>
</dependency>
+ <!--endregion-->
</dependencies>
</dependencyManagement>
