This is an automated email from the ASF dual-hosted git repository.
lukaszlenart pushed a commit to branch release/struts-6-7-x
in repository https://gitbox.apache.org/repos/asf/struts.git
The following commit(s) were added to refs/heads/release/struts-6-7-x by this
push:
new 1fcfc42ab Bump log4j2.version from 2.25.1 to 2.25.2 (#1437)
1fcfc42ab is described below
commit 1fcfc42ab2f677860a48d139bf3e77dfb429ddc5
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Mon Dec 1 06:54:13 2025 +0100
Bump log4j2.version from 2.25.1 to 2.25.2 (#1437)
Bumps `log4j2.version` from 2.25.1 to 2.25.2.
Updates `org.apache.logging.log4j:log4j-api` from 2.25.1 to 2.25.2
Updates `org.apache.logging.log4j:log4j-core` from 2.25.1 to 2.25.2
Updates `org.apache.logging.log4j:log4j-jcl` from 2.25.1 to 2.25.2
Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.1 to 2.25.2
---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
dependency-version: 2.25.2
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-core
dependency-version: 2.25.2
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-jcl
dependency-version: 2.25.2
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
dependency-version: 2.25.2
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index 18d21225b..c1a28418f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -111,7 +111,7 @@
<!-- dependency versions in alphanumeric order -->
<asm.version>9.9</asm.version>
<jackson.version>2.20.1</jackson.version>
- <log4j2.version>2.25.1</log4j2.version>
+ <log4j2.version>2.25.2</log4j2.version>
<ognl.version>3.3.5</ognl.version>
<slf4j.version>2.0.17</slf4j.version>
<spring.platformVersion>5.3.39</spring.platformVersion>
