From 644c12e696b5ea35a909d537b5b0525b450de401 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 10 Aug 2026 13:35:52 +0000 Subject: [PATCH] Bump org.apache.logging.log4j:log4j-jul from 2.25.4 to 2.26.1 Bumps org.apache.logging.log4j:log4j-jul from 2.25.4 to 2.26.1. --- updated-dependencies: - dependency-name: org.apache.logging.log4j:log4j-jul dependency-version: 2.26.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- dependencies.gradle | 14 +++++++------- 1 file changed, 7 insertions(+), 7 deletions(-) diff --git a/dependencies.gradle b/dependencies.gradle index bab7dcbd669..bd594b54f53 100644 --- a/dependencies.gradle +++ b/dependencies.gradle @@ -46,8 +46,8 @@ dependencies { implementation 'org.apache.geronimo.components:geronimo-transaction:3.1.5' // 4.0.0 does not compile implementation 'org.apache.geronimo.specs:geronimo-jms_1.1_spec:1.1.1' implementation 'org.apache.httpcomponents:httpclient-cache:4.5.14' - implementation 'org.apache.logging.log4j:log4j-api:2.25.4' // the API of log4j 2 - implementation 'org.apache.logging.log4j:log4j-core:2.25.4' // Somehow needed by Buildbot to compile OFBizDynamicThresholdFilter.java + implementation 'org.apache.logging.log4j:log4j-api:2.26.1' // the API of log4j 2 + implementation 'org.apache.logging.log4j:log4j-core:2.26.1' // Somehow needed by Buildbot to compile OFBizDynamicThresholdFilter.java implementation 'org.apache.poi:poi:4.1.2' // poi-ooxml-schemas-5.0.0.pom'. Received status code 401 from server implementation 'org.apache.pdfbox:pdfbox:2.0.36' // 3.0.1 does not compile implementation 'org.apache.shiro:shiro-core:1.13.0' @@ -101,11 +101,11 @@ dependencies { runtimeOnly 'org.apache.derby:derby:10.16.1.1' // 10.17.x.x requires Java 21 runtimeOnly 'org.apache.derby:derbytools:10.16.1.1' // 10.17.x.x requires Java 21 runtimeOnly 'org.apache.geronimo.specs:geronimo-jaxrpc_1.1_spec:2.1' - runtimeOnly 'org.apache.logging.log4j:log4j-1.2-api:2.25.4' // for external jars using the old log4j1.2: routes logging to log4j 2 - runtimeOnly 'org.apache.logging.log4j:log4j-jul:2.25.4' // for external jars using the java.util.logging: routes logging to log4j 2 - runtimeOnly 'org.apache.logging.log4j:log4j-slf4j-impl:2.25.4' // for external jars using slf4j: routes logging to log4j 2 - runtimeOnly 'org.apache.logging.log4j:log4j-web:2.25.4' //??? - runtimeOnly 'org.apache.logging.log4j:log4j-jcl:2.25.4' // need to constrain to version to avoid classpath conflict (ReflectionUtil) + runtimeOnly 'org.apache.logging.log4j:log4j-1.2-api:2.26.1' // for external jars using the old log4j1.2: routes logging to log4j 2 + runtimeOnly 'org.apache.logging.log4j:log4j-jul:2.26.1' // for external jars using the java.util.logging: routes logging to log4j 2 + runtimeOnly 'org.apache.logging.log4j:log4j-slf4j-impl:2.26.1' // for external jars using slf4j: routes logging to log4j 2 + runtimeOnly 'org.apache.logging.log4j:log4j-web:2.26.1' //??? + runtimeOnly 'org.apache.logging.log4j:log4j-jcl:2.26.1' // need to constrain to version to avoid classpath conflict (ReflectionUtil) // specify last codenarc version for java 17 compliance codenarc('org.codenarc:CodeNarc:3.7.0')