This is an automated email from the ASF dual-hosted git repository.
mridulpathak pushed a commit to branch release24.09
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git
The following commit(s) were added to refs/heads/release24.09 by this push:
new 83e7811449 Bump org.apache.logging.log4j:log4j-core from 2.25.4 to
2.26.1
83e7811449 is described below
commit 83e78114490b6f58d39e4c8db8fd6a0a52bb13aa
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Fri Aug 28 08:56:15 2026 +0000
Bump org.apache.logging.log4j:log4j-core from 2.25.4 to 2.26.1
Bumps org.apache.logging.log4j:log4j-core from 2.25.4 to 2.26.1.
---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
dependency-version: 2.26.1
dependency-type: direct:production
update-type: version-update:semver-minor
...
Signed-off-by: dependabot[bot] <[email protected]>
---
dependencies.gradle | 14 +++++++-------
1 file changed, 7 insertions(+), 7 deletions(-)
diff --git a/dependencies.gradle b/dependencies.gradle
index fdeb049574..7e2ffb8ec2 100644
--- a/dependencies.gradle
+++ b/dependencies.gradle
@@ -46,8 +46,8 @@ dependencies {
implementation 'org.apache.geronimo.components:geronimo-transaction:3.1.5'
// 4.0.0 does not compile
implementation 'org.apache.geronimo.specs:geronimo-jms_1.1_spec:1.1.1'
implementation 'org.apache.httpcomponents:httpclient-cache:4.5.14'
- implementation 'org.apache.logging.log4j:log4j-api:2.25.4' // the API of
log4j 2
- implementation 'org.apache.logging.log4j:log4j-core:2.25.4' // Somehow
needed by Buildbot to compile OFBizDynamicThresholdFilter.java
+ implementation 'org.apache.logging.log4j:log4j-api:2.26.1' // the API of
log4j 2
+ implementation 'org.apache.logging.log4j:log4j-core:2.26.1' // Somehow
needed by Buildbot to compile OFBizDynamicThresholdFilter.java
implementation 'org.apache.poi:poi:4.1.2' // poi-ooxml-schemas-5.0.0.pom'.
Received status code 401 from server
implementation 'org.apache.pdfbox:pdfbox:2.0.37' // 3.0.1 does not compile
implementation 'org.apache.shiro:shiro-core:1.13.0'
@@ -101,11 +101,11 @@ dependencies {
runtimeOnly 'org.apache.derby:derby:10.16.1.1' // 10.17.x.x requires Java
21
runtimeOnly 'org.apache.derby:derbytools:10.16.1.1' // 10.17.x.x requires
Java 21
runtimeOnly 'org.apache.geronimo.specs:geronimo-jaxrpc_1.1_spec:2.1'
- runtimeOnly 'org.apache.logging.log4j:log4j-1.2-api:2.25.4' // for
external jars using the old log4j1.2: routes logging to log4j 2
- runtimeOnly 'org.apache.logging.log4j:log4j-jul:2.25.4' // for external
jars using the java.util.logging: routes logging to log4j 2
- runtimeOnly 'org.apache.logging.log4j:log4j-slf4j-impl:2.25.4' // for
external jars using slf4j: routes logging to log4j 2
- runtimeOnly 'org.apache.logging.log4j:log4j-web:2.25.4' //???
- runtimeOnly 'org.apache.logging.log4j:log4j-jcl:2.25.4' // need to
constrain to version to avoid classpath conflict (ReflectionUtil)
+ runtimeOnly 'org.apache.logging.log4j:log4j-1.2-api:2.26.1' // for
external jars using the old log4j1.2: routes logging to log4j 2
+ runtimeOnly 'org.apache.logging.log4j:log4j-jul:2.26.1' // for external
jars using the java.util.logging: routes logging to log4j 2
+ runtimeOnly 'org.apache.logging.log4j:log4j-slf4j-impl:2.26.1' // for
external jars using slf4j: routes logging to log4j 2
+ runtimeOnly 'org.apache.logging.log4j:log4j-web:2.26.1' //???
+ runtimeOnly 'org.apache.logging.log4j:log4j-jcl:2.26.1' // need to
constrain to version to avoid classpath conflict (ReflectionUtil)
// specify last codenarc version for java 17 compliance
codenarc('org.codenarc:CodeNarc:3.7.0')
