This is an automated email from the ASF dual-hosted git repository.
lhotari pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/master by this push:
new 492a231c06f [improve][misc] Upgrade log4j to 2.26.0 and slf4j to
2.0.18 (#25973)
492a231c06f is described below
commit 492a231c06fb838be8e36975980145eeb3014943
Author: Lari Hotari <[email protected]>
AuthorDate: Mon Jun 8 20:44:36 2026 +0300
[improve][misc] Upgrade log4j to 2.26.0 and slf4j to 2.0.18 (#25973)
---
distribution/server/src/assemble/LICENSE.bin.txt | 14 +++++++-------
distribution/shell/src/assemble/LICENSE.bin.txt | 12 ++++++------
gradle/libs.versions.toml | 4 ++--
3 files changed, 15 insertions(+), 15 deletions(-)
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt
b/distribution/server/src/assemble/LICENSE.bin.txt
index 75b33af3793..5cdfbfe63c7 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -345,11 +345,11 @@ The Apache Software License, Version 2.0
- jakarta.validation-jakarta.validation-api-3.0.2.jar
- javax.validation-validation-api-1.1.0.Final.jar
* Log4J
- - org.apache.logging.log4j-log4j-api-2.25.4.jar
- - org.apache.logging.log4j-log4j-core-2.25.4.jar
- - org.apache.logging.log4j-log4j-slf4j2-impl-2.25.4.jar
- - org.apache.logging.log4j-log4j-web-2.25.4.jar
- - org.apache.logging.log4j-log4j-layout-template-json-2.25.4.jar
+ - org.apache.logging.log4j-log4j-api-2.26.0.jar
+ - org.apache.logging.log4j-log4j-core-2.26.0.jar
+ - org.apache.logging.log4j-log4j-slf4j2-impl-2.26.0.jar
+ - org.apache.logging.log4j-log4j-web-2.26.0.jar
+ - org.apache.logging.log4j-log4j-layout-template-json-2.26.0.jar
* Java Native Access JNA
- net.java.dev.jna-jna-jpms-5.18.1.jar
- net.java.dev.jna-jna-platform-jpms-5.18.1.jar
@@ -575,8 +575,8 @@ BSD 2-Clause License
MIT License
* Java SemVer -- com.github.zafarkhaja-java-semver-0.9.0.jar --
../licenses/LICENSE-SemVer.txt
* SLF4J -- ../licenses/LICENSE-SLF4J.txt
- - org.slf4j-slf4j-api-2.0.17.jar
- - org.slf4j-jcl-over-slf4j-2.0.17.jar
+ - org.slf4j-slf4j-api-2.0.18.jar
+ - org.slf4j-jcl-over-slf4j-2.0.18.jar
* The Checker Framework
- org.checkerframework-checker-qual-3.33.0.jar
* oshi
diff --git a/distribution/shell/src/assemble/LICENSE.bin.txt
b/distribution/shell/src/assemble/LICENSE.bin.txt
index 163805750c9..376eaa78525 100644
--- a/distribution/shell/src/assemble/LICENSE.bin.txt
+++ b/distribution/shell/src/assemble/LICENSE.bin.txt
@@ -381,11 +381,11 @@ The Apache Software License, Version 2.0
- simpleclient_tracer_otel-0.16.0.jar
- simpleclient_tracer_otel_agent-0.16.0.jar
* Log4J
- - log4j-api-2.25.4.jar
- - log4j-core-2.25.4.jar
- - log4j-layout-template-json-2.25.4.jar
- - log4j-slf4j2-impl-2.25.4.jar
- - log4j-web-2.25.4.jar
+ - log4j-api-2.26.0.jar
+ - log4j-core-2.26.0.jar
+ - log4j-layout-template-json-2.26.0.jar
+ - log4j-slf4j2-impl-2.26.0.jar
+ - log4j-web-2.26.0.jar
* OpenTelemetry
- opentelemetry-api-1.62.0.jar
- opentelemetry-api-incubator-1.62.0-alpha.jar
@@ -433,7 +433,7 @@ BSD 3-clause "New" or "Revised" License
MIT License
* SLF4J -- ../licenses/LICENSE-SLF4J.txt
- - slf4j-api-2.0.17.jar
+ - slf4j-api-2.0.18.jar
CDDL-1.1 -- ../licenses/LICENSE-CDDL-1.1.txt
* HK2 - Dependency Injection Kernel
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index 23e8b078089..c4aca1d3bd2 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -33,9 +33,9 @@ jackson = "2.21.3"
jackson-annotations = "2.21"
protobuf = "4.35.0"
grpc = "1.75.0"
-slf4j = "2.0.17"
+slf4j = "2.0.18"
slog = "0.9.7"
-log4j2 = "2.25.4"
+log4j2 = "2.26.0"
lombok = "1.18.42"
# OpenTelemetry
opentelemetry = "1.62.0"
