You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@commons.apache.org by gg...@apache.org on 2026/03/28 12:05:30 UTC

(commons-vfs) branch master updated: Bump log4j2.version from 2.25.3 to 2.25.4

This is an automated email from the ASF dual-hosted git repository.

ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-vfs.git


The following commit(s) were added to refs/heads/master by this push:
     new 262d1f8e9 Bump log4j2.version from 2.25.3 to 2.25.4
262d1f8e9 is described below

commit 262d1f8e9cc0b976d32aae79302d8c3902fc1531
Author: Gary Gregory <ga...@gmail.com>
AuthorDate: Sat Mar 28 08:05:24 2026 -0400

    Bump log4j2.version from 2.25.3 to 2.25.4
---
 pom.xml                 | 2 +-
 src/changes/changes.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index 59e0ec0a3..6f877c3b8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -96,7 +96,7 @@
     <!-- 2.22.0 requires Java 11. -->
     <jackrabbit2.version>2.20.17</jackrabbit2.version>
     <slf4j.version>2.0.17</slf4j.version>
-    <log4j2.version>2.25.3</log4j2.version>
+    <log4j2.version>2.25.4</log4j2.version>
     <collections4.version>4.5.0</collections4.version>
     <jsch.version>0.1.55</jsch.version>
     <httpclient3.version>3.1</httpclient3.version>
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 916d3cc26..6902e5cb6 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -79,7 +79,7 @@ The <action> type attribute can be add,update,fix,remove.
       <action type="update" dev="ggregory" due-to="Gary Gregory, Dependabot">Bump org.slf4j:slf4j-simple from 2.0.16 to 2.0.17 #671.</action>
       <action type="update" dev="ggregory" due-to="Gary Gregory">Bump commons-io:commons-io from 2.18.0 to 2.21.0.</action>
       <action type="update" dev="ggregory" due-to="Gary Gregory">Bump org.apache.commons:commons-collections4 from 4.5.0-M3 to 4.5.0.</action>
-      <action type="update" dev="ggregory" due-to="Gary Gregory, Dependabot">Bump org.apache.logging.log4j:log4j-bom from 2.24.3 to 2.25.3 #694, #725, #749.</action>
+      <action type="update" dev="ggregory" due-to="Gary Gregory, Dependabot">Bump org.apache.logging.log4j:log4j-bom from 2.24.3 to 2.25.4 #694, #725, #749.</action>
       <action type="update" dev="ggregory" due-to="Gary Gregory, Dependabot">Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0 #699.</action>
       <action type="update" dev="ggregory" due-to="Gary Gregory">Bump org.apache.jackrabbit:jackrabbit-standalone-components from 2.20.16 to 2.20.17.</action>
       <action type="update" dev="ggregory" due-to="Gary Gregory">Bump commons-codec:commons-codec from 1.18.0 to 1.21.0.</action>