This is an automated email from the ASF dual-hosted git repository.
ggregory pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/commons-configuration.git
The following commit(s) were added to refs/heads/master by this push:
new 980597e60 Bump org.apache.logging.log4j:log4j-core from 2.25.2 to
2.25.3 (#626)
980597e60 is described below
commit 980597e6005cd88b5f025492df00268ff8462d21
Author: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Fri Dec 19 19:24:44 2025 -0500
Bump org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.3 (#626)
Bumps org.apache.logging.log4j:log4j-core from 2.25.2 to 2.25.3.
---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
dependency-version: 2.25.3
dependency-type: direct:production
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
pom.xml | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/pom.xml b/pom.xml
index cd45afa12..63ac0a734 100644
--- a/pom.xml
+++ b/pom.xml
@@ -57,7 +57,7 @@
org.yaml.snakeyaml.*;resolution:=optional,
*
</commons.osgi.import>
- <log4j.version>2.25.2</log4j.version>
+ <log4j.version>2.25.3</log4j.version>
<slf4j.version>2.0.17</slf4j.version>
<!-- Spring 6 requires Java 17 -->
<spring.version>5.3.39</spring.version>
