Re: Improving Dependabot Automation Under New Workflow Requirements

2025-05-13 Thread Volkan Yazıcı
Thanks for chasing this Piotr. Given the recently stagnating Log4j maintainer time, the workflow of verifying dependabot PRs, adding associated changelog entries, and automatically merging upon success was a big time saver for us. I'd really appreciate it if we can bring it back. In GHA workflows,

Re: Improving Dependabot Automation Under New Workflow Requirements

2025-05-13 Thread Piotr P. Karwasz
Hi Volkan, On 13.05.2025 11:06, Volkan Yazıcı wrote: > Thanks for chasing this Piotr. Given the recently stagnating Log4j > maintainer time, the workflow of verifying dependabot PRs, adding > associated changelog entries, and automatically merging upon success was a > big time saver for us. I'd re

Re: [D] log4j-1.2.13.jar substitution in v.2.17.1 [logging-log4j2]

2025-05-13 Thread via GitHub
GitHub user ElaHuskovic68 added a comment to the discussion: log4j-1.2.13.jar substitution in v.2.17.1 hi @ppkarwasz - thank you for your answer. This is third party application, I dont have source code, only war file which contains 1.x version of log4j jar file. I checked with Owner and it lo

Re: [D] log4j-1.2.13.jar substitution in v.2.17.1 [logging-log4j2]

2025-05-13 Thread via GitHub
GitHub user perry2of5 added a comment to the discussion: log4j-1.2.13.jar substitution in v.2.17.1 Some people have been known to recommend Reload4j 1.2.18 as a replacement for log4j 1.2.17 GitHub link: https://github.com/apache/logging-log4j2/discussions/3656#discussioncomment-13135934 ---

Re: [D] log4j-1.2.13.jar substitution in v.2.17.1 [logging-log4j2]

2025-05-13 Thread via GitHub
GitHub user lalo-mx added a comment to the discussion: log4j-1.2.13.jar substitution in v.2.17.1 > Some people have been known to recommend Reload4j 1.2.18 as a replacement for > log4j 1.2.17 https://reload4j.qos.ch/ > Initiated by Ceki Gülcü, the original author of Apache log4j 1.x, the >