Skip to content

Upgrade log4net to 3.3.0 and remove obsolete app.config files#1268

Merged
claudiamurialdo merged 2 commits into
masterfrom
fix/log4netvulnerability
Apr 16, 2026
Merged

Upgrade log4net to 3.3.0 and remove obsolete app.config files#1268
claudiamurialdo merged 2 commits into
masterfrom
fix/log4netvulnerability

Conversation

@claudiamurialdo
Copy link
Copy Markdown
Collaborator

Bump log4net from 2.0.11 / 2.0.15 to 3.3.0 in the GxClasses projects, and log4net.Ext.Json to 3.0.3 (compatible with log4net 3.x). Updated the hardcoded version in gxconfig.cs used by AssemblyResolve.

Removed app.config files from .NET Framework library projects: they are not read at runtime from a consuming executable, and the redirects were stale. No source changes needed — none of the APIs removed in log4net 3.0 are used in the codebase.

Issue:208361

@claudiamurialdo claudiamurialdo had a problem deploying to external-storage-tests April 15, 2026 14:36 — with GitHub Actions Failure
@claudiamurialdo claudiamurialdo temporarily deployed to kafka-integration-tests April 15, 2026 14:36 — with GitHub Actions Inactive
@genexusbot
Copy link
Copy Markdown
Collaborator

Cherry pick to beta success

@claudiamurialdo claudiamurialdo temporarily deployed to kafka-integration-tests April 15, 2026 14:47 — with GitHub Actions Inactive
@claudiamurialdo claudiamurialdo temporarily deployed to external-storage-tests April 15, 2026 14:47 — with GitHub Actions Inactive
@genexusbot
Copy link
Copy Markdown
Collaborator

Cherry pick to beta success

@claudiamurialdo claudiamurialdo merged commit 667cf1d into master Apr 16, 2026
10 checks passed
@claudiamurialdo claudiamurialdo deleted the fix/log4netvulnerability branch April 16, 2026 13:49
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants