fix(deps): update org.apache.logging.log4j to v2.26.0

Bump log4j-1.2-api/api/core/slf4j2-impl from 2.25.3 to 2.26.0. Regenerate dependency verification metadata and the expected release jar list.

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>

Author: vlsi

gradle/verification-metadata.xml

@@ -257,6 +257,11 @@
             <sha256 value="25eafd96dae242b6b5a7108f55b2c14015b828daa5abe234289fd6e774a1ce57" origin="Generated by Gradle"/>
          </artifact>
       </component>
+      <component group="com.fasterxml" name="oss-parent" version="69">
+         <artifact name="oss-parent-69.pom">
+            <sha256 value="3856d584aaa1c8e33ce94c67244f71f6f70538a259ffe8e781761b9faaad875f" origin="Generated by Gradle"/>
+         </artifact>
+      </component>
       <component group="com.fasterxml.jackson" name="jackson-bom" version="2.15.3">
          <artifact name="jackson-bom-2.15.3.pom">
             <sha256 value="66fc9945c16716bc202f4b9d7e6d969df3f509feffbe1acf1a31511b753d5c9d" origin="Generated by Gradle"/>

src/bom-thirdparty/build.gradle.kts

@@ -112,10 +112,10 @@ dependencies {
         api("org.apache.httpcomponents:httpcore-nio:4.4.16")
         api("org.apache.httpcomponents:httpcore:4.4.16")
         api("org.apache.httpcomponents:httpmime:4.5.14")
-        api("org.apache.logging.log4j:log4j-1.2-api:2.25.3")
-        api("org.apache.logging.log4j:log4j-api:2.25.3")
-        api("org.apache.logging.log4j:log4j-core:2.25.3")
-        api("org.apache.logging.log4j:log4j-slf4j2-impl:2.25.3")
+        api("org.apache.logging.log4j:log4j-1.2-api:2.26.0")
+        api("org.apache.logging.log4j:log4j-api:2.26.0")
+        api("org.apache.logging.log4j:log4j-core:2.26.0")
+        api("org.apache.logging.log4j:log4j-slf4j2-impl:2.26.0")
         api("org.apache.rat:apache-rat:0.17")
         api("org.apache.tika:tika-core:3.2.3")
         api("org.apache.tika:tika-parsers:3.2.3")

src/dist/src/dist/expected_release_jars.csv

@@ -102,10 +102,10 @@
 675271,kotlinx-datetime-jvm-0.6.2.jar
 996,lets-plot-batik-4.8.0.jar
 996,lets-plot-common-4.8.0.jar
-359213,log4j-1.2-api-2.25.3.jar
-350610,log4j-api-2.25.3.jar
-2018402,log4j-core-2.25.3.jar
-30213,log4j-slf4j2-impl-2.25.3.jar
+359197,log4j-1.2-api-2.26.0.jar
+351126,log4j-api-2.26.0.jar
+2015101,log4j-core-2.26.0.jar
+30211,log4j-slf4j2-impl-2.26.0.jar
 519087,mail-1.5.0-b01.jar
 120556,miglayout-core-11.4.3.jar
 23361,miglayout-swing-11.4.3.jar