This is an automated email from the ASF dual-hosted git repository.
FrankChen021 pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/druid.git
The following commit(s) were added to refs/heads/master by this push:
new 1a1a162e200 build(deps): bump log4j.version from 2.26.0 to 2.26.1
(#19865)
1a1a162e200 is described below
commit 1a1a162e200b6eb0e833e0ba46cdd7e5b18415f4
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Wed Aug 5 10:24:27 2026 +0800
build(deps): bump log4j.version from 2.26.0 to 2.26.1 (#19865)
* build(deps): bump log4j.version from 2.26.0 to 2.26.1
Bumps `log4j.version` from 2.26.0 to 2.26.1.
Updates `org.apache.logging.log4j:log4j-api` from 2.26.0 to 2.26.1
Updates `org.apache.logging.log4j:log4j-core` from 2.26.0 to 2.26.1
Updates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.26.0 to 2.26.1
Updates `org.apache.logging.log4j:log4j-1.2-api` from 2.26.0 to 2.26.1
Updates `org.apache.logging.log4j:log4j-layout-template-json` from 2.26.0
to 2.26.1
Updates `org.apache.logging.log4j:log4j-jul` from 2.26.0 to 2.26.1
---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
dependency-version: 2.26.1
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-core
dependency-version: 2.26.1
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl
dependency-version: 2.26.1
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-1.2-api
dependency-version: 2.26.1
dependency-type: direct:development
update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-layout-template-json
dependency-version: 2.26.1
dependency-type: direct:production
update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-jul
dependency-version: 2.26.1
dependency-type: direct:production
update-type: version-update:semver-patch
...
Signed-off-by: dependabot[bot] <[email protected]>
* build(deps): align Log4j license metadata
---------
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
Co-authored-by: Frank Chen <[email protected]>
---
licenses.yaml | 2 +-
pom.xml | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/licenses.yaml b/licenses.yaml
index 34a60520045..ad0e115093d 100644
--- a/licenses.yaml
+++ b/licenses.yaml
@@ -2073,7 +2073,7 @@ name: Apache Log4j
license_category: binary
module: java-core
license_name: Apache License version 2.0
-version: 2.26.0
+version: 2.26.1
libraries:
- org.apache.logging.log4j: log4j-1.2-api
- org.apache.logging.log4j: log4j-api
diff --git a/pom.xml b/pom.xml
index 4b603d1eda4..81dd214ccc8 100644
--- a/pom.xml
+++ b/pom.xml
@@ -108,7 +108,7 @@
<jersey.version>1.19.4</jersey.version>
<jackson.version>2.22.1</jackson.version>
<codehaus.jackson.version>1.9.13</codehaus.jackson.version>
- <log4j.version>2.26.0</log4j.version>
+ <log4j.version>2.26.1</log4j.version>
<mysql.version>8.2.0</mysql.version>
<mariadb.version>2.7.3</mariadb.version>
<netty3.version>3.10.6.Final</netty3.version>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
