This is an automated email from the ASF dual-hosted git repository.
wusheng pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/skywalking.git
The following commit(s) were added to refs/heads/master by this push:
new 4325e74919 chore: bump up some dependencies (#13721)
4325e74919 is described below
commit 4325e74919d0bf8496e9d861e3bbde99cffff597
Author: kezhenxu94 <[email protected]>
AuthorDate: Tue Mar 3 17:07:46 2026 +0800
chore: bump up some dependencies (#13721)
---
dist-material/release-docs/LICENSE | 10 +++++-----
docs/en/changes/changes.md | 1 +
oap-server-bom/pom.xml | 4 ++--
3 files changed, 8 insertions(+), 7 deletions(-)
diff --git a/dist-material/release-docs/LICENSE
b/dist-material/release-docs/LICENSE
index 2fc0faf271..a23629e1ed 100644
--- a/dist-material/release-docs/LICENSE
+++ b/dist-material/release-docs/LICENSE
@@ -217,8 +217,8 @@ The text of each license is the standard Apache 2.0 license.
https://mvnrepository.com/artifact/com.alibaba.nacos/nacos-encryption-plugin/2.3.2
Apache-2.0
https://mvnrepository.com/artifact/com.ctrip.framework.apollo/apollo-client/1.8.0
Apache-2.0
https://mvnrepository.com/artifact/com.ctrip.framework.apollo/apollo-core/1.8.0
Apache-2.0
-
https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-annotations/2.16.0
Apache-2.0
-
https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-core/2.16.0
Apache-2.0
+
https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-annotations/2.18.5
Apache-2.0
+
https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-core/2.18.5
Apache-2.0
https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind/2.16.0
Apache-2.0
https://mvnrepository.com/artifact/com.fasterxml.jackson.dataformat/jackson-dataformat-yaml/2.15.2
Apache-2.0
https://mvnrepository.com/artifact/com.fasterxml.jackson.datatype/jackson-datatype-guava/2.12.0
Apache-2.0
@@ -353,9 +353,9 @@ The text of each license is the standard Apache 2.0 license.
https://mvnrepository.com/artifact/org.apache.httpcomponents/httpcore/4.4.16
Apache-2.0
https://mvnrepository.com/artifact/org.apache.httpcomponents/httpcore-nio/4.4.16
Apache-2.0
https://mvnrepository.com/artifact/org.apache.kafka/kafka-clients/3.4.0
Apache-2.0
-
https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-api/2.17.1
Apache-2.0
-
https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core/2.17.1
Apache-2.0
-
https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-slf4j-impl/2.17.1
Apache-2.0
+
https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-api/2.25.3
Apache-2.0
+
https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-core/2.25.3
Apache-2.0
+
https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-slf4j-impl/2.25.3
Apache-2.0
https://mvnrepository.com/artifact/org.apache.yetus/audience-annotations/0.5.0
Apache-2.0
https://mvnrepository.com/artifact/org.apache.zookeeper/zookeeper/3.5.7
Apache-2.0
https://mvnrepository.com/artifact/org.apache.zookeeper/zookeeper-jute/3.5.7
Apache-2.0
diff --git a/docs/en/changes/changes.md b/docs/en/changes/changes.md
index 3779172f95..62c104f13b 100644
--- a/docs/en/changes/changes.md
+++ b/docs/en/changes/changes.md
@@ -134,6 +134,7 @@
(up to 200 on-demand threads) because HTTP handlers block on long storage/DB
queries.
* Add the spring-ai components and the GenAI layer.
* Bump up netty to 4.2.10.Final.
+* Bump up log4j to 2.25.3 and jackson to 2.18.5.
#### UI
* Fix the missing icon in new native trace view.
diff --git a/oap-server-bom/pom.xml b/oap-server-bom/pom.xml
index f6177d4135..b03e64845e 100644
--- a/oap-server-bom/pom.xml
+++ b/oap-server-bom/pom.xml
@@ -29,7 +29,7 @@
<properties>
<slf4j.version>1.7.30</slf4j.version>
- <log4j.version>2.17.1</log4j.version>
+ <log4j.version>2.25.3</log4j.version>
<google.error_prone_annotations>2.11.0</google.error_prone_annotations>
<graphql-java-tools.version>13.0.1</graphql-java-tools.version>
<graphql-java.version>21.5</graphql-java.version>
@@ -49,7 +49,7 @@
<kubernetes.version>6.7.1</kubernetes.version>
<hikaricp.version>3.1.0</hikaricp.version>
<zipkin.version>2.24.1</zipkin.version>
- <jackson.version>2.16.0</jackson.version>
+ <jackson.version>2.18.5</jackson.version>
<jackson-databind.version>2.16.0</jackson-databind.version>
<simpleclient.version>0.6.0</simpleclient.version>
<apollo.version>1.8.0</apollo.version>
