You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@ofbiz.apache.org by mr...@apache.org on 2026/08/28 15:14:09 UTC
(ofbiz-framework) branch trunk updated: Bump log4j from 2.25.4 to 2.26.1

This is an automated email from the ASF dual-hosted git repository.

mridulpathak pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/ofbiz-framework.git


The following commit(s) were added to refs/heads/trunk by this push:
     new 87c49507e0 Bump log4j from 2.25.4 to 2.26.1
87c49507e0 is described below

commit 87c49507e0b4701e4436e541cced53c10918405e
Author: dependabot[bot] <49...@users.noreply.github.com>
AuthorDate: Sun Aug 9 14:20:53 2026 +0000

    Bump log4j from 2.25.4 to 2.26.1
    
    Bumps `log4j` from 2.25.4 to 2.26.1.
    
    Updates `org.apache.logging.log4j:log4j-api` from 2.25.4 to 2.26.1
    
    Updates `org.apache.logging.log4j:log4j-core` from 2.25.4 to 2.26.1
    
    Updates `org.apache.logging.log4j:log4j-layout-template-json` from 2.25.4 to 2.26.1
    
    Updates `org.apache.logging.log4j:log4j-1.2-api` from 2.25.4 to 2.26.1
    
    Updates `org.apache.logging.log4j:log4j-jul` from 2.25.4 to 2.26.1
    
    Updates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.25.4 to 2.26.1
    
    Updates `org.apache.logging.log4j:log4j-web` from 2.25.4 to 2.26.1
    
    Updates `org.apache.logging.log4j:log4j-jcl` from 2.25.4 to 2.26.1
    
    ---
    updated-dependencies:
    - dependency-name: org.apache.logging.log4j:log4j-api
      dependency-version: 2.26.1
      dependency-type: direct:production
      update-type: version-update:semver-minor
    - dependency-name: org.apache.logging.log4j:log4j-core
      dependency-version: 2.26.1
      dependency-type: direct:production
      update-type: version-update:semver-minor
    - dependency-name: org.apache.logging.log4j:log4j-layout-template-json
      dependency-version: 2.26.1
      dependency-type: direct:production
      update-type: version-update:semver-minor
    - dependency-name: org.apache.logging.log4j:log4j-1.2-api
      dependency-version: 2.26.1
      dependency-type: direct:production
      update-type: version-update:semver-minor
    - dependency-name: org.apache.logging.log4j:log4j-jul
      dependency-version: 2.26.1
      dependency-type: direct:production
      update-type: version-update:semver-minor
    - dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl
      dependency-version: 2.26.1
      dependency-type: direct:production
      update-type: version-update:semver-minor
    - dependency-name: org.apache.logging.log4j:log4j-web
      dependency-version: 2.26.1
      dependency-type: direct:production
      update-type: version-update:semver-minor
    - dependency-name: org.apache.logging.log4j:log4j-jcl
      dependency-version: 2.26.1
      dependency-type: direct:production
      update-type: version-update:semver-minor
    ...
    
    Signed-off-by: dependabot[bot] <su...@github.com>
---
 gradle/libs.versions.toml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index bf8c8c2d7b..d09bca0337 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -55,7 +55,7 @@ geronimo-jms-spec = "1.1.1"
 httpclient-cache = "4.5.14"
 # Shared by log4j-api, log4j-core, log4j-layout-template-json, log4j-legacy-api, log4j-jul,
 # log4j-slf4j2-impl, log4j-web, log4j-jcl.
-log4j = "2.25.4"
+log4j = "2.26.1"
 poi = "5.5.1"
 pdfbox = "3.0.8"
 # Got "Exception in thread "main" java.lang.UnsupportedOperationException: Cannot create a hash with