Skip to content

chore(deps): bump org.apache.logging.log4j:log4j-bom from 2.25.3 to 2.26.1 - #110

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/org.apache.logging.log4j-log4j-bom-2.25.4
Sep 29, 2026
Merged

github-actions[bot] merged 1 commit into
mainfrom
dependabot/maven/org.apache.logging.log4j-log4j-bom-2.25.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Mar 30, 2026 •

Copy link
Copy Markdown
Contributor

Bumps org.apache.logging.log4j:log4j-bom from 2.25.3 to 2.26.1.

Release notes

Sourced from org.apache.logging.log4j:log4j-bom's releases.

2.26.1

This patch release delivers certain fixes on top of 2.26.0.

Changed

  • Improve logging for LinkageError scenarios involving the LMAX Disruptor library (#2250, #4124)

Fixed

  • Fix the createOnDemand behavior of RollingFileAppender to correctly defer file and directory creation until the first log event, while preserving eager creation when disabled. (#2006, #4072)
  • Improve documentation for locale handling in the Pattern Layout date pattern converter (#4129, #4130)
  • Fix handling of non-finite numbers while encoding MapMessage to JSON (#4163)
  • Fix encoding of MSGID and SD-ID fields of StructuredDataMessage to XML (#4136)
  • Fix stack trace rendering for exceptions with identity malfunction (e.g., colliding equals() and/or hashCode() implementations) (#3933, #4133)
  • Fix resource leaks in ConfigurationSource when loading configuration via URL fails (#4127)
  • Fix KafkaAppender reporting error to error handler even after a successful retry (#4125)

2.26.0

This minor release delivers all the fixes in the [2.25.0, 2.25.4] version range, plus some new fixes, and several other improvements and features.

Added

  • Add a new ConfigurationFactory::getConfiguration method accepting multiple URIs (#3775, #3921)
  • Add and export org.apache.logging.log4j.core.pattern.NamedInstantPattern enabling users to programmatically access named date & time patterns supported by Pattern Layout (#3789)
  • Add log4j.plugin.processor.minAllowedMessageKind annotation processor option to PluginProcessor to filter diagnostic messages by severity. This allows builds that treat compiler notes as errors (e.g. Maven with -Werror) to suppress informational notes emitted during normal plugin processing. (apache/logging-log4j2#3380, #4063)
  • Add missing setters to Rfc5424LayoutBuilder

Changed

  • Ensure scripts in the global Scripts element have explicit names by throwing a ConfigurationException for unnamed ones. (#3176)
  • Simplify file manager registry factory methods (#3968)

Deprecated

  • Deprecated withers in builder classes in favor of setters. This change improves API consistency with Log4j Core 3 and helps users adapt to the upcoming changes. (#3750)

Fixed

  • Fix script resolution failure when the Scripts element is placed after a ScriptRef in the configuration. (#3336)
  • Fix ArrayIndexOutOfBoundsException thrown by ThrowableStackTraceRenderer when the stack trace is modified concurrently (#3940, #3955)
  • Fix SLF4JLogger.atFatal() returning atLevel(Level.TRACE) instead of atLevel(Level.FATAL). This was causing FATAL-level log events to be silently discarded when using the fluent API through the log4j-to-slf4j bridge. (#4068, #4089)
  • Fix Javadoc references across module boundaries (i.e., cross-references) (#4099, #4100)
  • Fix header write in RollingRandomAccessFileManager that was being incorrectly skipped if append=true and the file didn't exist before
  • Fix a properties file configuration regression caused by not referenced loggers, appenders, and filters (#4036, #4069)

Removed

  • Remove the jvmrunargs lookup. (#3874)

Updated

... (truncated)

Commits
  • dd0f9d2 Release changelog for version 2.26.1
  • efbb638 Update the project.build.outputTimestamp property
  • c9332be Fix handling of non-finite numbers while encoding MapMessage to JSON (#4163)
  • bd8eca1 Fix AsciiDoc typo in pattern-layout.adoc
  • df1c753 tidy up changelogs
  • 0592cff fix version in pom.xml
  • e320257 Release changelog for version 2.26.1
  • 5755541 Update the project.build.outputTimestamp property
  • 6c2d931 Set version to 2.26.1
  • 69d6641 add patch release/2.26.1 liked commits and moved changelog the release/2.26.1...
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Mar 30, 2026
@github-actions
github-actions Bot enabled auto-merge (squash) March 30, 2026 17:36
@github-actions

github-actions Bot commented Mar 30, 2026 •

Copy link
Copy Markdown

Unit Test Results

344 tests   344 ✔️  3s ⏱️
  26 suites      0 💤
  26 files        0 ❌

Results for commit 483f147.

♻️ This comment has been updated with latest results.

@codecov

codecov Bot commented Mar 30, 2026 •

Copy link
Copy Markdown

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 88.29%. Comparing base (6bc6486) to head (483f147).
⚠️ Report is 4 commits behind head on main.

Additional details and impacted files
@@            Coverage Diff            @@
##               main     #110   +/-   ##
=========================================
  Coverage     88.29%   88.29%           
  Complexity      296      296           
=========================================
  Files            43       43           
  Lines           743      743           
  Branches         79       79           
=========================================
  Hits            656      656           
  Misses           83       83           
  Partials          4        4           

☔ View full report in Codecov by Harness.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@sitepark-veltrup

Copy link
Copy Markdown
Member

@dependabot rebase

Bumps [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2) from 2.25.3 to 2.26.1.
- [Release notes](https://github.com/apache/logging-log4j2/releases)
- [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc)
- [Commits](apache/logging-log4j2@rel/2.25.3...rel/2.26.1)

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-bom
  dependency-version: 2.25.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title chore(deps): bump org.apache.logging.log4j:log4j-bom from 2.25.3 to 2.25.4 chore(deps): bump org.apache.logging.log4j:log4j-bom from 2.25.3 to 2.26.1 Sep 29, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/org.apache.logging.log4j-log4j-bom-2.25.4 branch from 0e1c3fe to 483f147 Compare September 29, 2026 05:57
@github-actions
github-actions Bot merged commit 5282eac into main Sep 29, 2026
5 checks passed
@github-actions
github-actions Bot deleted the dependabot/maven/org.apache.logging.log4j-log4j-bom-2.25.4 branch September 29, 2026 05:59
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant