Skip to content

build(deps): bump log4j-version from 2.25.3 to 2.25.4#1993

Open
robertregina59 wants to merge 1 commit intoapache:activemq-6.2.xfrom
robertregina59:backport-log4j2-cve
Open

build(deps): bump log4j-version from 2.25.3 to 2.25.4#1993
robertregina59 wants to merge 1 commit intoapache:activemq-6.2.xfrom
robertregina59:backport-log4j2-cve

Conversation

@robertregina59
Copy link
Copy Markdown

Bumps log4j-version from 2.25.3 to 2.25.4.

Updates org.apache.logging.log4j:log4j-api from 2.25.3 to 2.25.4

Updates org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4

Updates org.apache.logging.log4j:log4j-slf4j2-impl from 2.25.3 to 2.25.4


updated-dependencies:

  • dependency-name: org.apache.logging.log4j:log4j-api dependency-version: 2.25.4 dependency-type: direct:production update-type: version-update:semver-patch
  • dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.25.4 dependency-type: direct:production update-type: version-update:semver-patch
  • dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl dependency-version: 2.25.4 dependency-type: direct:production update-type: version-update:semver-patch ...

Signed-off-by: dependabot[bot] [email protected]
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

(cherry picked from commit 66d5d74)

Bumps `log4j-version` from 2.25.3 to 2.25.4.

Updates `org.apache.logging.log4j:log4j-api` from 2.25.3 to 2.25.4

Updates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4

Updates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.25.3 to 2.25.4

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

(cherry picked from commit 66d5d74)
@robertregina59 robertregina59 changed the title build(deps): bump log4j-version from 2.25.3 to 2.25.4 (#1854) build(deps): bump log4j-version from 2.25.3 to 2.25.4 May 6, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant