Hi Gary, On Sat, 2 Sept 2023 at 14:36, Gary Gregory <garydgreg...@gmail.com> wrote: > So any time you release any jar, the BOM is updated?
The current `log4j-bom` artifact should probably be released each time (or shortly after the last release if multiple releases are close together). However we can also introduce other BOMs, e.g.: * a `log4j-ri-starter` might include all the major bridges to Log4j API and `log4j-core`, * a `log4j-ri-starter-json` might include the previous one + JTL, These of course only need to be updated if one of the components they include was updated. Piotr