Skip to content

build(deps): bump log4j-version from 2.25.3 to 2.25.4#1993

Merged
jbonofre merged 1 commit into
apache:activemq-6.2.xfrom
robertregina59:backport-log4j2-cve
May 7, 2026
Merged

build(deps): bump log4j-version from 2.25.3 to 2.25.4#1993
jbonofre merged 1 commit into
apache:activemq-6.2.xfrom
robertregina59:backport-log4j2-cve

Conversation

@robertregina59
Copy link
Copy Markdown

Bumps log4j-version from 2.25.3 to 2.25.4.

Updates org.apache.logging.log4j:log4j-api from 2.25.3 to 2.25.4

Updates org.apache.logging.log4j:log4j-core from 2.25.3 to 2.25.4

Updates org.apache.logging.log4j:log4j-slf4j2-impl from 2.25.3 to 2.25.4


updated-dependencies:

  • dependency-name: org.apache.logging.log4j:log4j-api dependency-version: 2.25.4 dependency-type: direct:production update-type: version-update:semver-patch
  • dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.25.4 dependency-type: direct:production update-type: version-update:semver-patch
  • dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl dependency-version: 2.25.4 dependency-type: direct:production update-type: version-update:semver-patch ...

Signed-off-by: dependabot[bot] support@github.com
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

(cherry picked from commit 66d5d74)

Bumps `log4j-version` from 2.25.3 to 2.25.4.

Updates `org.apache.logging.log4j:log4j-api` from 2.25.3 to 2.25.4

Updates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4

Updates `org.apache.logging.log4j:log4j-slf4j2-impl` from 2.25.3 to 2.25.4

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.apache.logging.log4j:log4j-slf4j2-impl
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>

(cherry picked from commit 66d5d74)
@robertregina59 robertregina59 changed the title build(deps): bump log4j-version from 2.25.3 to 2.25.4 (#1854) build(deps): bump log4j-version from 2.25.3 to 2.25.4 May 6, 2026
@jbonofre jbonofre self-requested a review May 7, 2026 06:02
@jbonofre jbonofre closed this May 7, 2026
@jbonofre jbonofre reopened this May 7, 2026
@jbonofre jbonofre merged commit 4d395cc into apache:activemq-6.2.x May 7, 2026
3 of 4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants