This is an automated email from the ASF dual-hosted git repository.

lukaszlenart pushed a commit to branch release/struts-6-8-x
in repository https://gitbox.apache.org/repos/asf/struts.git


The following commit(s) were added to refs/heads/release/struts-6-8-x by this 
push:
     new 39c1e2995 build(deps): bump log4j2.version from 2.25.3 to 2.25.4 
(#1647)
39c1e2995 is described below

commit 39c1e29958456a84c7c08641b9fdaf36e2e65336
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Thu Apr 2 16:23:08 2026 +0200

    build(deps): bump log4j2.version from 2.25.3 to 2.25.4 (#1647)
    
    Bumps `log4j2.version` from 2.25.3 to 2.25.4.
    
    Updates `org.apache.logging.log4j:log4j-api` from 2.25.3 to 2.25.4
    
    Updates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4
    
    Updates `org.apache.logging.log4j:log4j-jcl` from 2.25.3 to 2.25.4
    
    Updates `org.apache.logging.log4j:log4j-slf4j-impl` from 2.25.3 to 2.25.4
    
    Updates `org.apache.logging.log4j:log4j-web` from 2.25.3 to 2.25.4
    
    ---
    updated-dependencies:
    - dependency-name: org.apache.logging.log4j:log4j-api
      dependency-version: 2.25.4
      dependency-type: direct:production
      update-type: version-update:semver-patch
    - dependency-name: org.apache.logging.log4j:log4j-core
      dependency-version: 2.25.4
      dependency-type: direct:production
      update-type: version-update:semver-patch
    - dependency-name: org.apache.logging.log4j:log4j-jcl
      dependency-version: 2.25.4
      dependency-type: direct:development
      update-type: version-update:semver-patch
    - dependency-name: org.apache.logging.log4j:log4j-slf4j-impl
      dependency-version: 2.25.4
      dependency-type: direct:production
      update-type: version-update:semver-patch
    - dependency-name: org.apache.logging.log4j:log4j-web
      dependency-version: 2.25.4
      dependency-type: direct:production
      update-type: version-update:semver-patch
    ...
    
    Signed-off-by: dependabot[bot] <[email protected]>
    Co-authored-by: dependabot[bot] 
<49699333+dependabot[bot]@users.noreply.github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index f5f654f05..b42785521 100644
--- a/pom.xml
+++ b/pom.xml
@@ -111,7 +111,7 @@
         <!-- dependency versions in alphanumeric order -->
         <asm.version>9.9.1</asm.version>
         <jackson.version>2.21.2</jackson.version>
-        <log4j2.version>2.25.3</log4j2.version>
+        <log4j2.version>2.25.4</log4j2.version>
         <ognl.version>3.3.5</ognl.version>
         <slf4j.version>2.0.17</slf4j.version>
         <spring.platformVersion>5.3.39</spring.platformVersion>

Reply via email to