(commons-configuration) branch master updated: Bump org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4

[gg...@apache.org]

This is an automated email from the ASF dual-hosted git repository.

ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-configuration.git


The following commit(s) were added to refs/heads/master by this push:
     new 8c065cb9e Bump org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4
8c065cb9e is described below

commit 8c065cb9ebb4a6535923f565a710e0fd13d7dfeb
Author: Gary Gregory <ga...@gmail.com>
AuthorDate: Sat Mar 28 07:54:05 2026 -0400

    Bump org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4
---
 pom.xml                 | 2 +-
 src/changes/changes.xml | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index f498d1dd5..2072c0f57 100644
--- a/pom.xml
+++ b/pom.xml
@@ -57,7 +57,7 @@
       org.yaml.snakeyaml.*;resolution:=optional,
       *
     </commons.osgi.import>
-    <log4j.version>2.25.3</log4j.version>
+    <log4j.version>2.25.4</log4j.version>
     <slf4j.version>2.0.17</slf4j.version>
     <!-- Spring 6 requires Java 17 -->
     <spring.version>5.3.39</spring.version>
diff --git a/src/changes/changes.xml b/src/changes/changes.xml
index 35546d22e..b8f06c7dd 100644
--- a/src/changes/changes.xml
+++ b/src/changes/changes.xml
@@ -32,7 +32,7 @@
       <action type="update" dev="ggregory" due-to="Gary Gregory">Bump org.apache.commons:commons-text from 1.14.0 to 1.15.0.</action>
       <action type="update" dev="ggregory" due-to="Gary Gregory">[test] Bump org.apache.commons:commons-pool2 from 2.12.1 to 2.13.1 #474.</action>
       <action type="update" dev="ggregory" due-to="Gary Gregory">[test] Bump org.apache.commons:commons-dbcp2 from 2.13.0 to 2.14.0.</action>
-      <action type="update" dev="ggregory" due-to="Gary Gregory">Bump org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.3 #626.</action>
+      <action type="update" dev="ggregory" due-to="Gary Gregory">Bump org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.4 #626.</action>
       <action type="update" dev="ggregory" due-to="Gary Gregory">Bump commons-codec:commons-codec from 1.20.0 to 1.21.0.</action>
       <action type="update" dev="ggregory" due-to="Gary Gregory">Bump com.fasterxml.jackson.core:jackson-databind from 2.20.1 to 2.21.1.</action>
       <action dev="ggregory" type="update" due-to="Gary Gregory">Bump commons-logging:commons-logging from 1.3.5 to 1.3.6.</action>