Author: svc_dist_logging Date: Mon Dec 15 12:51:43 2025 New Revision: 81398
Log: Added `apache-log4j` artifacts for release `2.25.3` Added: dev/logging/log4j/2.25.3/ dev/logging/log4j/2.25.3/apache-log4j-2.25.3-bin.zip (contents, props changed) dev/logging/log4j/2.25.3/apache-log4j-2.25.3-bin.zip.asc dev/logging/log4j/2.25.3/apache-log4j-2.25.3-bin.zip.sha512 dev/logging/log4j/2.25.3/apache-log4j-2.25.3-email-announce.txt dev/logging/log4j/2.25.3/apache-log4j-2.25.3-email-vote.txt dev/logging/log4j/2.25.3/apache-log4j-2.25.3-src.zip (contents, props changed) dev/logging/log4j/2.25.3/apache-log4j-2.25.3-src.zip.asc dev/logging/log4j/2.25.3/apache-log4j-2.25.3-src.zip.sha512 Added: dev/logging/log4j/2.25.3/apache-log4j-2.25.3-bin.zip ============================================================================== Binary file. No diff available. Added: dev/logging/log4j/2.25.3/apache-log4j-2.25.3-bin.zip.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ dev/logging/log4j/2.25.3/apache-log4j-2.25.3-bin.zip.asc Mon Dec 15 12:51:43 2025 (r81398) @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEB36Ik6bcwz3UpNWyVuc7qaC1ktAFAmlABFYACgkQVuc7qaC1 +ktDH2hAAs2Wu+YkPdvYaC71OjqOPQQFTbOXhQyo0OmoOXDd2k6oN52ha/jm5glyu +v4C7WzeO5Nm2PLgpksiTArGpp+7BAkcWv4Pesg1iysRTxOHRcSJUQv996Ss1CtJH +rfRGtnxDbtlt6YW1CBsfKa7NK0RI5PP6YMh3i45euUjE0bxnbIlvHs8J4QT3Om2G +5Xs/PKd0ERMLRH/HER3WPgn7e5XpfJNpiHOupP8s6bcbTO4xqSC8eHWurdHyx6SH +V2u051gMdDK50nnI4uBRckvB7nH3VVwPnoGAOJA4IWoewd87maPXScwSQgBs8LKG +uEe/s/uTfw6mtdTL7otMx9ozJZBjuH5Pb7Ye2jQVQJoSo1s0q0Gmdue8DAs8gO8Y +BDmU2NEElcXi9NUIQ/Iu/w/yFR4pvG1xJX5It7eVE1VScL17SKH8VR30zdIFZO+r +L3T9HLCXZOx/wCdyPbbIyXfhwHbF7P7/gaMuilRG2sw5z91hNUR/jYduDaJdxMA2 +IO/Xt2MoZuCUGqdR79UfwtNm2gZQBcfgjDycqBD8TAVULo5OC4DxUwgvSOR728Y9 +sZyNSd2adY9Ag4JjgW4+5BDNrf50kS2scXMHUP2TW6sTtsj8Juzoyns4UTbfQ48O +RaaX/H84+2uF2j0U71Dr0ZFaZgr718Zz7rsCNCiL10a6Tfu5BjE= +=0xjo +-----END PGP SIGNATURE----- Added: dev/logging/log4j/2.25.3/apache-log4j-2.25.3-bin.zip.sha512 ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ dev/logging/log4j/2.25.3/apache-log4j-2.25.3-bin.zip.sha512 Mon Dec 15 12:51:43 2025 (r81398) @@ -0,0 +1 @@ +e9af8bffe564a5eea81813d057b65dc9396a4103d0f2cfb795923c7395bfe7a132f06d8802073bb391c271ba06e3f610c3beddbd2a12f3f2eef9dd98bc996d70 apache-log4j-2.25.3-bin.zip Added: dev/logging/log4j/2.25.3/apache-log4j-2.25.3-email-announce.txt ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ dev/logging/log4j/2.25.3/apache-log4j-2.25.3-email-announce.txt Mon Dec 15 12:51:43 2025 (r81398) @@ -0,0 +1,35 @@ +To: [email protected], [email protected] +Title: [ANNOUNCE] Apache Log4j `2.25.3` released + +Apache Log4j team is pleased to announce the `2.25.3` +release. Apache Log4j is a versatile, industrial-strength +Java logging framework composed of an API, its implementation, +and components to assist the deployment for various use cases. +For further information (support, download, etc.) see the project +website[1]. + +[1] https://logging.apache.org/log4j/2.x/index.html + +== Release Notes + +This patch release addresses issues detailed in the changelog below. +In particular, it includes an important fix for xref:manual/appenders/network.adoc#SslConfiguration-attr-verifyHostName[the host name verification in SSL/TLS configuration]. +This is used by xref:manual/appenders/network.adoc#SocketAppender[Socket Appender]. + + +[#release-notes-2-25-3-changed] +=== Changed + +* Optimize `DefaultThreadContextMap.getCopy()` performance by avoiding megamorphic calls in `HashMap` constructor (#3935, #3939) + +[#release-notes-2-25-3-fixed] +=== Fixed + +* Fix GraalVM metadata for nested classes to use binary names instead of canonical names (#3871, #3996) +* Fix failures caused by null `SslConfiguration` (#3947, #3953) +* Fix incorrect handling of xref:manual/appenders/network.adoc#SslConfiguration-attr-verifyHostName[the host name verification in SSL/TLS configuration], which is used by xref:manual/appenders/network.adoc#SocketAppender[Socket Appender] when SSL/TLS is enabled (#4002) + +[#release-notes-2-25-3-removed] +=== Removed + +* Remove the `com.github.spotbugs:spotbugs-annotations` dependency (#3984, #3985) Added: dev/logging/log4j/2.25.3/apache-log4j-2.25.3-email-vote.txt ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ dev/logging/log4j/2.25.3/apache-log4j-2.25.3-email-vote.txt Mon Dec 15 12:51:43 2025 (r81398) @@ -0,0 +1,47 @@ +To: [email protected] +Title: [VOTE] Release Apache Log4j `2.25.3` + +This is a vote to release the Apache Log4j `2.25.3`. + +Website: https://logging.staged.apache.org/log4j/2.25.3/index.html +GitHub: https://github.com/apache/logging-log4j2 +Commit: 028e9fad03ae7bcbf2e49ab8d32d8cfb900f3587 +Distribution: https://dist.apache.org/repos/dist/dev/logging/log4j/2.25.3 +Nexus: https://repository.apache.org:443/content/repositories/orgapachelogging-1323 +Signing key: 0x077e8893a6dcc33dd4a4d5b256e73ba9a0b592d0 +Review kit: https://logging.apache.org/logging-parent/release-review-instructions.html + +Please download, test, and cast your votes on this mailing list. + +[ ] +1, release the artifacts +[ ] -1, don't release, because... + +This vote is open for 72 hours and will pass unless getting a +net negative vote count. All votes are welcome and we encourage +everyone to test the release, but only the Logging Services PMC +votes are officially counted. At least 3 +1 votes and more +positive than negative votes are required. + +== Release Notes + +This patch release addresses issues detailed in the changelog below. +In particular, it includes an important fix for xref:manual/appenders/network.adoc#SslConfiguration-attr-verifyHostName[the host name verification in SSL/TLS configuration]. +This is used by xref:manual/appenders/network.adoc#SocketAppender[Socket Appender]. + + +[#release-notes-2-25-3-changed] +=== Changed + +* Optimize `DefaultThreadContextMap.getCopy()` performance by avoiding megamorphic calls in `HashMap` constructor (#3935, #3939) + +[#release-notes-2-25-3-fixed] +=== Fixed + +* Fix GraalVM metadata for nested classes to use binary names instead of canonical names (#3871, #3996) +* Fix failures caused by null `SslConfiguration` (#3947, #3953) +* Fix incorrect handling of xref:manual/appenders/network.adoc#SslConfiguration-attr-verifyHostName[the host name verification in SSL/TLS configuration], which is used by xref:manual/appenders/network.adoc#SocketAppender[Socket Appender] when SSL/TLS is enabled (#4002) + +[#release-notes-2-25-3-removed] +=== Removed + +* Remove the `com.github.spotbugs:spotbugs-annotations` dependency (#3984, #3985) Added: dev/logging/log4j/2.25.3/apache-log4j-2.25.3-src.zip ============================================================================== Binary file. No diff available. Added: dev/logging/log4j/2.25.3/apache-log4j-2.25.3-src.zip.asc ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ dev/logging/log4j/2.25.3/apache-log4j-2.25.3-src.zip.asc Mon Dec 15 12:51:43 2025 (r81398) @@ -0,0 +1,16 @@ +-----BEGIN PGP SIGNATURE----- + +iQIzBAABCgAdFiEEB36Ik6bcwz3UpNWyVuc7qaC1ktAFAmlABFYACgkQVuc7qaC1 +ktARDxAAjQ+H0kSexOVTE9ZrYyHc29Jhpgqm7MRApo3KGpQUkwmoLfWg8jZtRjcm +bQ5Xbg/0vBkh1j0HWqtW17h3NFoIEWts7bbAAa+exlZWbeUkMT9ZQr9tww9kmq8y +ZV2ur/4DzyJf6hV8ZwfWPQPq9mr+tz6AbRq4cEkKC1pKih8KQg+u98N3IrRfbu1D +xSfo2dyP2xkXezILqaaOmDeV8VZkHH6onP+Z15SkPdfFc0cTMo7E3l7wK9LukqxL +l6jxzpL4V7hxVQc44JuRZbkoBZk9nKqQexBapShgqkDEnEN4iit5u5J2YyCCCQeE +SKsJSt1G5kispL1xrCM5sBA26GrVToqKMPmArwhcRO9k5MfZfQmrwNkSLNxnav7D +yMUuplEYqIO0dMg23+tha2J/N1bdZ1a0TEGZkBVjPjwXqMQcWSCL5/nWZTN9NP5q +Z9gNb5a36LXkGh3TUEAO+HJP4ANaXtcNs1nZ9yu8n82AhZhw6xyahVq8K2/iljNq +Ym0Ig4IhXFDziifbIB8edjhAo7P/uVk38pZTdeLle0CgkaNbFay2Tmg3ferz8jTM +DO1H+AZycyN+o5UkJBfOAX2pWtJBSOIkZ3iF0GYs3BdVGgc0QoM1dSdB08Q/t+v4 +VI+MsGTN3ORXIudtqfEP+/VVZxu+PPqGI+MlEyfKPiKp+tuhf7g= +=FKCo +-----END PGP SIGNATURE----- Added: dev/logging/log4j/2.25.3/apache-log4j-2.25.3-src.zip.sha512 ============================================================================== --- /dev/null 00:00:00 1970 (empty, because file is newly added) +++ dev/logging/log4j/2.25.3/apache-log4j-2.25.3-src.zip.sha512 Mon Dec 15 12:51:43 2025 (r81398) @@ -0,0 +1 @@ +6cd981315c48bec2a5e61b6b7910e8fa7771e276b64e99f949104b76ba6290693439584723f93da32b80dde06938ba482abfe0d16b591494e43fb121e8975a25 apache-log4j-2.25.3-src.zip
