[DISCUSS][VOTE] Release Apache Log4j `2.25.5`

["Piotr P. Karwasz" <pi...@mailing.copernik.eu>]

Hi Gary,

On 1.07.2026 16:55, Gary Gregory wrote:
> Why are we releasing 2.25.x? When we are on 2.26.x?

Solr is planning to make an LTS version and the current versions (9.10.1
and 10.0.0) are both on 2.25.x. I wanted to help them by maintaining
2.25.x for as long as they maintain their LTS.

Why Log4j 2.25.x and not 2.26.x?

Spring Boot 4.0.x and 4.1.x use Log4j 2.25.x and will never upgrade to a
new minor version.

Piotr

Re: [DISCUSS][VOTE] Release Apache Log4j `2.25.5`

["Piotr P. Karwasz" <pi...@mailing.copernik.eu>]

Hi Gary,

On 1.07.2026 17:44, Gary Gregory wrote:
> That's like us putting our cart before the horse.


I'd rather look at it as laying the foundation before building the house.

By the way, this is something I'd like to propose for Commons too: if we
have people willing to vote on an LTS release alongside the newest one,
I am willing to stage those releases.

I know both Commons and Log4j are backward compatible, so in theory
users could stay on whatever version they have today and only upgrade
when a vulnerability appears. In practice, though, every bug fix and
small change breaks someone's use case, so it's safer to keep users
concentrated on a single LTS release and apply as few patches as possible.

Piotr

Re: [DISCUSS][VOTE] Release Apache Log4j `2.25.5`

[Gary Gregory <ga...@gmail.com>]

On Wed, Jul 1, 2026, 11:40 Piotr P. Karwasz <pi...@mailing.copernik.eu>
wrote:

> Hi Gary,
>
> On 1.07.2026 16:55, Gary Gregory wrote:
> > Why are we releasing 2.25.x? When we are on 2.26.x?
>
> Solr is planning to make an LTS version and the current versions (9.10.1
> and 10.0.0) are both on 2.25.x. I wanted to help them by maintaining
> 2.25.x for as long as they maintain their LTS.
>
> Why Log4j 2.25.x and not 2.26.x?
>
> Spring Boot 4.0.x and 4.1.x use Log4j 2.25.x and will never upgrade to a
> new minor version.
>

That's like us putting our cart before the horse.

Gary

>
> Piotr
>
>
>