This is an automated email from the ASF dual-hosted git repository.
imbajin pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/hugegraph-toolchain.git
The following commit(s) were added to refs/heads/master by this push:
new ef4fd10bb chore(deps): bump Log4j to 2.25.5 (#763)
ef4fd10bb is described below
commit ef4fd10bb1537a4fcd1787586ee2ab920c360a35
Author: Suraj Rajan <[email protected]>
AuthorDate: Fri Sep 4 21:12:29 2026 +0530
chore(deps): bump Log4j to 2.25.5 (#763)
---------
Signed-off-by: Suraj Rajan <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
hugegraph-dist/release-docs/LICENSE | 7 ++++---
hugegraph-dist/scripts/dependency/known-dependencies.txt | 7 ++++---
hugegraph-spark-connector/pom.xml | 2 +-
pom.xml | 2 +-
4 files changed, 10 insertions(+), 8 deletions(-)
diff --git a/hugegraph-dist/release-docs/LICENSE
b/hugegraph-dist/release-docs/LICENSE
index 6b0c88c01..69e048027 100644
--- a/hugegraph-dist/release-docs/LICENSE
+++ b/hugegraph-dist/release-docs/LICENSE
@@ -281,10 +281,10 @@ See licenses/ for text of these licenses.
(Apache License, Version 2.0) * Apache Ivy (org.apache.ivy:ivy:2.5.0 -
http://ant.apache.org/ivy/)
(Apache License, Version 2.0) * Apache Log4j 1.x Compatibility API
(org.apache.logging.log4j:log4j-1.2-api:2.11.2 -
https://logging.apache.org/log4j/2.x/log4j-1.2-api/)
(Apache License, Version 2.0) * Apache Log4j 1.x Compatibility API
(org.apache.logging.log4j:log4j-1.2-api:2.17.1 -
https://logging.apache.org/log4j/2.x/log4j-1.2-api/)
- (Apache License, Version 2.0) * Apache Log4j API
(org.apache.logging.log4j:log4j-api:2.18.0 -
https://logging.apache.org/log4j/2.x/log4j-api/)
- (Apache License, Version 2.0) * Apache Log4j Core
(org.apache.logging.log4j:log4j-core:2.18.0 -
https://logging.apache.org/log4j/2.x/log4j-core/)
+ (Apache License, Version 2.0) * Apache Log4j API
(org.apache.logging.log4j:log4j-api:2.25.5 -
https://logging.apache.org/log4j/2.x/log4j-api/)
+ (Apache License, Version 2.0) * Apache Log4j Core
(org.apache.logging.log4j:log4j-core:2.25.5 -
https://logging.apache.org/log4j/2.x/log4j-core/)
(Apache License, Version 2.0) * Apache Log4j JUL Adapter
(org.apache.logging.log4j:log4j-jul:2.11.2 -
https://logging.apache.org/log4j/2.x/log4j-jul/)
- (Apache License, Version 2.0) * Apache Log4j SLF4J Binding
(org.apache.logging.log4j:log4j-slf4j-impl:2.18.0 -
https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/)
+ (Apache License, Version 2.0) * Apache Log4j SLF4J Binding
(org.apache.logging.log4j:log4j-slf4j-impl:2.25.5 -
https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/)
(Apache License, Version 2.0) * Apache Thrift
(org.apache.thrift:libthrift:0.9.3 - http://thrift.apache.org)
(Apache License, Version 2.0) * Apache Yetus - Audience Annotations
(org.apache.yetus:audience-annotations:0.5.0 -
https://yetus.apache.org/audience-annotations)
(Apache License, Version 2.0) * Apache ZooKeeper - Jute
(org.apache.zookeeper:zookeeper-jute:3.6.2 -
http://zookeeper.apache.org/zookeeper-jute)
@@ -593,6 +593,7 @@ See licenses/ for text of these licenses.
(The MIT License) * SLF4J API Module (org.slf4j:slf4j-api:1.7.25 -
http://www.slf4j.org)
(The MIT License) * SLF4J API Module (org.slf4j:slf4j-api:1.7.28 -
http://www.slf4j.org)
(The MIT License) * SLF4J API Module (org.slf4j:slf4j-api:1.7.30 -
http://www.slf4j.org)
+ (The MIT License) * SLF4J API Module (org.slf4j:slf4j-api:1.7.36 -
http://www.slf4j.org)
(The MIT License) * SLF4J LOG4J-12 Binding
(org.slf4j:slf4j-log4j12:1.7.28 - http://www.slf4j.org)
(The MIT License) * SLF4J LOG4J-12 Binding
(org.slf4j:slf4j-log4j12:1.7.30 - http://www.slf4j.org)
(The MIT License) * lightning-csv
(org.simpleflatmapper:lightning-csv:8.2.1 -
http://github.com/arnaudroger/SimpleFlatMapper/lightning-csv)
diff --git a/hugegraph-dist/scripts/dependency/known-dependencies.txt
b/hugegraph-dist/scripts/dependency/known-dependencies.txt
index b9a88cddf..2d97a6ba4 100644
--- a/hugegraph-dist/scripts/dependency/known-dependencies.txt
+++ b/hugegraph-dist/scripts/dependency/known-dependencies.txt
@@ -382,9 +382,9 @@
listenablefuture-9999.0-empty-to-avoid-conflict-with-guava.jar
log4j-1.2-api-2.11.2.jar
log4j-1.2-api-2.17.1.jar
log4j-1.2.17.jar
-log4j-api-2.18.0.jar
-log4j-core-2.18.0.jar
-log4j-slf4j-impl-2.18.0.jar
+log4j-api-2.25.5.jar
+log4j-core-2.25.5.jar
+log4j-slf4j-impl-2.25.5.jar
log4j-to-slf4j-2.11.2.jar
log4j-web-2.11.2.jar
logback-classic-1.2.3.jar
@@ -467,6 +467,7 @@ sketches-core-0.9.0.jar
slf4j-api-1.7.25.jar
slf4j-api-1.7.28.jar
slf4j-api-1.7.30.jar
+slf4j-api-1.7.36.jar
slf4j-log4j12-1.7.30.jar
smiley-http-proxy-servlet-1.12.1.jar
snakeyaml-1.23.jar
diff --git a/hugegraph-spark-connector/pom.xml
b/hugegraph-spark-connector/pom.xml
index aef8407e5..bcb2b0b76 100644
--- a/hugegraph-spark-connector/pom.xml
+++ b/hugegraph-spark-connector/pom.xml
@@ -43,7 +43,7 @@
<spark.verion>3.2.2</spark.verion>
<spark.scope>provided</spark.scope>
<jackson.version>2.12.3</jackson.version>
- <log4j.version>2.18.0</log4j.version>
+ <log4j.version>2.25.5</log4j.version>
<slf4j.api.version>1.7.25</slf4j.api.version>
<scala.minor.version>2.12.11</scala.minor.version>
<assembly.dir>${project.basedir}/assembly</assembly.dir>
diff --git a/pom.xml b/pom.xml
index 26bc91c4a..92c95ecdf 100644
--- a/pom.xml
+++ b/pom.xml
@@ -143,7 +143,7 @@
<lz4.version>1.4.0</lz4.version>
<jcommand-version>1.72</jcommand-version>
<jackson.version>2.12.3</jackson.version>
- <log4j2.version>2.18.0</log4j2.version>
+ <log4j2.version>2.25.5</log4j2.version>
<dropwizard.metics.version>4.2.0</dropwizard.metics.version>
<netty.version>4.1.65.Final</netty.version>
<gson.version>2.8.9</gson.version>
