Bump the dependencies group across 1 directory with 55 updates

log4j-cassandra/pom.xml

@@ -46,7 +46,7 @@
     <!-- at least this version has one CVE less than the one suggested by Cassandra -->
     <guava.version>25.1-jre</guava.version>
     <!-- Pinned transitive dependencies for reproducibility between Linux and MacOS -->
-    <jnr-ffi.version>2.2.18</jnr-ffi.version>
+    <jnr-ffi.version>2.2.19</jnr-ffi.version>
     <snappy.version>1.1.10.8</snappy.version>
   </properties>
 

log4j-core-its/pom.xml

@@ -40,7 +40,7 @@
     <spotbugs.skip>true</spotbugs.skip>
 
     <!-- Dependency versions -->
-    <slf4j2.version>2.0.17</slf4j2.version>
+    <slf4j2.version>2.0.18</slf4j2.version>
 
   </properties>
 

log4j-core-test/pom.xml

@@ -64,7 +64,7 @@
     <!-- Additional version of LMAX Disruptor to test -->
     <disruptor4.version>4.0.0</disruptor4.version>
     <json-unit.version>2.40.1</json-unit.version>
-    <bouncycastle.version>1.83</bouncycastle.version>
+    <bouncycastle.version>1.84</bouncycastle.version>
   </properties>
 
   <dependencyManagement>

log4j-fuzz-test/pom.xml

@@ -39,7 +39,7 @@
     <sign.skip>true</sign.skip>
 
     <!-- dependency versions -->
-    <json.version>20250517</json.version>
+    <json.version>20251224</json.version>
 
   </properties>
 

log4j-layout-template-json-fuzz-test/pom.xml

@@ -40,7 +40,7 @@
     <sign.skip>true</sign.skip>
 
     <!-- dependency versions -->
-    <json.version>20250517</json.version>
+    <json.version>20251224</json.version>
 
   </properties>
 

log4j-layout-template-json-test/pom.xml

@@ -48,7 +48,7 @@
          2. The Docker image version of the ELK-stack
 
          As of 2024-09-16, these all (Maven artifacts and Elastic products) get released with the same version. -->
-    <elastic.version>9.2.0</elastic.version>
+    <elastic.version>9.4.0</elastic.version>
 
   </properties>
 

log4j-mongodb/pom.xml

@@ -30,8 +30,8 @@
     <!-- OSGi and JPMS options -->
     <Fragment-Host>org.apache.logging.log4j.core</Fragment-Host>
     <!-- Dependency versions -->
-    <mongodb.version>5.6.1</mongodb.version>
-    <slf4j2.version>2.0.17</slf4j2.version>
+    <mongodb.version>5.7.0</mongodb.version>
+    <slf4j2.version>2.0.18</slf4j2.version>
   </properties>
   <dependencyManagement>
     <dependencies>

log4j-parent/pom.xml

@@ -51,7 +51,7 @@
          Plugin version properties (in alphabetical order)
          ================================================= -->
     <asciidoctor-maven-plugin.version>2.2.4</asciidoctor-maven-plugin.version>
-    <docker-maven-plugin.version>0.46.0</docker-maven-plugin.version>
+    <docker-maven-plugin.version>0.48.1</docker-maven-plugin.version>
     <exam-maven-plugin.version>4.14.0</exam-maven-plugin.version>
     <maven-taglib-plugin.version>2.4</maven-taglib-plugin.version>
     <!-- `surefire.version` property used in `apache.org:apache`: -->
@@ -60,38 +60,38 @@
     <!-- =====================================================
          Direct dependency version properties (in alphabetical order)
          ===================================================== -->
-    <activemq.version>6.1.7</activemq.version>
-    <angus-activation.version>2.0.2</angus-activation.version>
-    <angus-mail.version>2.0.3</angus-mail.version>
-    <assertj.version>3.27.3</assertj.version>
+    <activemq.version>6.2.5</activemq.version>
+    <angus-activation.version>2.0.3</angus-activation.version>
+    <angus-mail.version>2.0.5</angus-mail.version>
+    <assertj.version>3.27.7</assertj.version>
     <awaitility.version>4.3.0</awaitility.version>
     <bsh.version>2.0b6</bsh.version>
-    <bnd.annotation.version>7.1.0</bnd.annotation.version>
+    <bnd.annotation.version>7.2.3</bnd.annotation.version>
     <cassandra.version>3.11.19</cassandra.version>
-    <cassandra-driver.version>3.11.5</cassandra-driver.version>
-    <commons-codec.version>1.18.0</commons-codec.version>
-    <commons-compress.version>1.27.1</commons-compress.version>
-    <commons-csv.version>1.14.0</commons-csv.version>
-    <commons-dbcp2.version>2.13.0</commons-dbcp2.version>
-    <commons-io.version>2.19.0</commons-io.version>
-    <commons-lang3.version>3.18.0</commons-lang3.version>
-    <commons-logging.version>1.3.5</commons-logging.version>
+    <cassandra-driver.version>4.0.0</cassandra-driver.version>
+    <commons-codec.version>1.22.0</commons-codec.version>
+    <commons-compress.version>1.28.0</commons-compress.version>
+    <commons-csv.version>1.14.1</commons-csv.version>
+    <commons-dbcp2.version>2.14.0</commons-dbcp2.version>
+    <commons-io.version>2.22.0</commons-io.version>
+    <commons-lang3.version>3.20.0</commons-lang3.version>
+    <commons-logging.version>1.3.6</commons-logging.version>
     <!-- `com.conversantmedia:disruptor` version 1.2.16 requires Java 9: -->
     <conversant.disruptor.version>1.2.15</conversant.disruptor.version>
     <disruptor.version>3.4.4</disruptor.version>
     <embedded-ldap.version>0.9.0</embedded-ldap.version>
-    <error-prone-annotations.version>2.38.0</error-prone-annotations.version>
+    <error-prone-annotations.version>2.49.0</error-prone-annotations.version>
     <felix.version>7.0.5</felix.version>
-    <groovy.version>4.0.27</groovy.version>
-    <guava.version>33.4.8-jre</guava.version>
+    <groovy.version>5.0.6</groovy.version>
+    <guava.version>33.6.0-jre</guava.version>
     <h2.version>2.2.224</h2.version>
     <hamcrest.version>3.0</hamcrest.version>
     <HdrHistogram.version>2.2.2</HdrHistogram.version>
     <hsqldb.version>2.7.4</hsqldb.version>
-    <jackson-bom.version>2.19.2</jackson-bom.version>
+    <jackson-bom.version>2.21.3</jackson-bom.version>
     <!-- Override the version in Jakarta EE 9 BOM: -->
-    <jakarta-activation.version>2.1.3</jakarta-activation.version>
-    <jakarta-mail.version>2.1.3</jakarta-mail.version>
+    <jakarta-activation.version>2.1.4</jakarta-activation.version>
+    <jakarta-mail.version>2.1.5</jakarta-mail.version>
     <!-- BOM with Jakarta EE 9 APIs: -->
     <jakartaee-bom.version>9.1.0</jakartaee-bom.version>
     <!-- No BOM for Java EE 8 APIs, so we list them separately: -->
@@ -102,45 +102,45 @@
     <javax-persistence.version>2.2</javax-persistence.version>
     <javax-servlet.version>4.0.1</javax-servlet.version>
     <javax-servlet-jsp.version>2.3.3</javax-servlet-jsp.version>
-    <java-allocation-instrumenter.version>3.3.4</java-allocation-instrumenter.version>
-    <jazzer.version>0.24.0</jazzer.version>
+    <java-allocation-instrumenter.version>3.3.5</java-allocation-instrumenter.version>
+    <jazzer.version>0.30.0</jazzer.version>
     <jconsole.version>1.7.0</jconsole.version>
-    <jctools.version>4.0.5</jctools.version>
+    <jctools.version>4.0.6</jctools.version>
     <jeromq.version>0.6.0</jeromq.version>
-    <jmdns.version>3.6.1</jmdns.version>
+    <jmdns.version>3.6.3</jmdns.version>
     <jmh.version>1.37</jmh.version>
     <jspecify.version>1.0.0</jspecify.version>
     <junit.version>4.13.2</junit.version>
-    <junit-jupiter.version>5.13.4</junit-jupiter.version>
+    <junit-jupiter.version>5.14.4</junit-jupiter.version>
     <junit-pioneer.version>1.9.1</junit-pioneer.version>
-    <kafka.version>3.9.1</kafka.version>
+    <kafka.version>3.9.2</kafka.version>
     <lightcouch.version>0.2.0</lightcouch.version>
     <log4j.version>1.2.17</log4j.version>
     <log4j-transform.version>0.2.0</log4j-transform.version>
     <log4j2-cachefile-transformer.version>2.15.0</log4j2-cachefile-transformer.version>
-    <log4j2-ecs-layout.version>1.7.0</log4j2-ecs-layout.version>
+    <log4j2-ecs-layout.version>1.8.0</log4j2-ecs-layout.version>
     <logback.version>1.3.15</logback.version>
-    <maven.version>3.9.10</maven.version>
+    <maven.version>3.9.15</maven.version>
     <mockito.version>4.11.0</mockito.version>
-    <nashorn.version>15.6</nashorn.version>
-    <org.eclipse.osgi.version>3.23.100</org.eclipse.osgi.version>
+    <nashorn.version>15.7</nashorn.version>
+    <org.eclipse.osgi.version>3.24.100</org.eclipse.osgi.version>
     <org.eclipse.persistence.version>2.7.16</org.eclipse.persistence.version>
     <oro.version>2.0.8</oro.version>
     <!-- The OSGi API version MUST always be the MINIMUM version Log4j supports: -->
     <osgi.api.version>6.0.0</osgi.api.version>
     <osgi.annotation.bundle.version>2.0.0</osgi.annotation.bundle.version>
     <osgi.annotation.versioning.version>1.1.2</osgi.annotation.versioning.version>
     <pax-exam.version>4.14.0</pax-exam.version>
-    <plexus-utils.version>3.6.0</plexus-utils.version>
+    <plexus-utils.version>3.6.1</plexus-utils.version>
     <spring-boot.version>2.7.18</spring-boot.version>
     <spring-framework.version>5.3.39</spring-framework.version>
-    <stax2-api.version>4.2.2</stax2-api.version>
+    <stax2-api.version>4.3.0</stax2-api.version>
     <system-stubs.version>2.0.3</system-stubs.version>
     <velocity.version>1.7</velocity.version>
-    <wiremock.version>2.35.2</wiremock.version>
-    <xmlunit.version>2.10.3</xmlunit.version>
-    <xz.version>1.10</xz.version>
-    <zstd.version>1.5.7-4</zstd.version>
+    <wiremock.version>3.0.1</wiremock.version>
+    <xmlunit.version>2.11.0</xmlunit.version>
+    <xz.version>1.12</xz.version>
+    <zstd.version>1.5.7-8</zstd.version>
 
     <!-- =====================================================
          Pinned transitive dependency version properties (in alphabetical order)
@@ -151,10 +151,10 @@
          ===================================================== -->
     <asm.version>9.6</asm.version>
     <byte-buddy.version>1.14.9</byte-buddy.version>
-    <commons-pool2.version>2.12.1</commons-pool2.version>
+    <commons-pool2.version>2.13.1</commons-pool2.version>
     <httpclient.version>4.5.14</httpclient.version>
     <httpcore.version>4.4.16</httpcore.version>
-    <jna.version>5.17.0</jna.version>
+    <jna.version>5.18.1</jna.version>
 
     <!-- Add 'requires static' for annotation library dependencies (defined as <scope>provided</scope> in this file)
          to allow them to be visible at compile time to make the '-Xlint:classfile' check of javac pass.
@@ -1091,7 +1091,7 @@
       <plugin>
         <groupId>org.gradlex</groupId>
         <artifactId>gradle-module-metadata-maven-plugin</artifactId>
-        <version>1.1</version>
+        <version>1.2</version>
         <configuration>
           <compileOnlyApiDependencies>
             <dependency>

log4j-perf-test/pom.xml

@@ -45,7 +45,7 @@
     <surefire.jdkToolchain>[9, )</surefire.jdkToolchain>
 
     <!-- Dependency versions -->
-    <slf4j2.version>2.0.17</slf4j2.version>
+    <slf4j2.version>2.0.18</slf4j2.version>
 
   </properties>
 

log4j-slf4j2-impl/pom.xml

@@ -36,7 +36,7 @@
     (Refer to the `log4j-to-slf4j` artifact for forwarding the Log4j API to SLF4J.)</description>
 
   <properties>
-    <slf4j2.version>2.0.17</slf4j2.version>
+    <slf4j2.version>2.0.18</slf4j2.version>
   </properties>
 
   <dependencyManagement>

log4j-spring-cloud-config-client/pom.xml

@@ -34,7 +34,7 @@
 
   <properties>
     <!-- Dependency versions -->
-    <spring-cloud.version>4.3.0</spring-cloud.version>
+    <spring-cloud.version>5.0.1</spring-cloud.version>
 
     <!--
       ~ OSGi and JPMS options

log4j-to-slf4j/pom.xml

@@ -50,7 +50,7 @@
       org.jspecify;transitive=false
     </bnd-extra-module-options>
 
-    <slf4j2.version>2.0.17</slf4j2.version>
+    <slf4j2.version>2.0.18</slf4j2.version>
   </properties>
 
   <dependencyManagement>

pom.xml

@@ -339,20 +339,20 @@
     <!-- Skipping `maven-site-plugin` globally. -->
     <maven.site.skip>true</maven.site.skip>
     <maven.site.deploy.skip>true</maven.site.deploy.skip>
-    <site-commons-compress.version>1.27.1</site-commons-compress.version>
-    <site-commons-csv.version>1.14.0</site-commons-csv.version>
-    <site-commons-logging.version>1.3.5</site-commons-logging.version>
+    <site-commons-compress.version>1.28.0</site-commons-compress.version>
+    <site-commons-csv.version>1.14.1</site-commons-csv.version>
+    <site-commons-logging.version>1.3.6</site-commons-logging.version>
     <site-conversant.version>1.2.21</site-conversant.version>
     <site-disruptor.version>4.0.0</site-disruptor.version>
     <site-flume.version>1.11.0</site-flume.version>
-    <site-jackson.version>2.19.2</site-jackson.version>
+    <site-jackson.version>2.21.3</site-jackson.version>
     <site-javax-mail.version>1.6.2</site-javax-mail.version>
-    <site-jctools.version>4.0.5</site-jctools.version>
+    <site-jctools.version>4.0.6</site-jctools.version>
     <site-je.version>18.3.12</site-je.version>
     <site-jeromq.version>0.6.0</site-jeromq.version>
-    <site-kafka.version>3.9.1</site-kafka.version>
+    <site-kafka.version>3.9.2</site-kafka.version>
     <site-logback.version>1.3.15</site-logback.version>
-    <site-slf4j.version>2.0.17</site-slf4j.version>
+    <site-slf4j.version>2.0.18</site-slf4j.version>
 
     <!-- =====================================================
          Direct dependency version properties (in alphabetical order)

src/changelog/.2.x.x/update_biz.aqute.bnd_biz.aqute.bnd.annotation.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="4126" link="https://github.com/apache/logging-log4j2/pull/4126"/>
+  <description format="asciidoc">Update `biz.aQute.bnd:biz.aQute.bnd.annotation` to version `7.2.3`</description>
+</entry>

src/changelog/.2.x.x/update_co.elastic.clients_elasticsearch-java.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="4126" link="https://github.com/apache/logging-log4j2/pull/4126"/>
+  <description format="asciidoc">Update `co.elastic.clients:elasticsearch-java` to version `9.4.0`</description>
+</entry>

src/changelog/.2.x.x/update_co.elastic.logging_log4j2-ecs-layout.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="4126" link="https://github.com/apache/logging-log4j2/pull/4126"/>
+  <description format="asciidoc">Update `co.elastic.logging:log4j2-ecs-layout` to version `1.8.0`</description>
+</entry>

src/changelog/.2.x.x/update_com.code-intelligence_jazzer-api.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="4126" link="https://github.com/apache/logging-log4j2/pull/4126"/>
+  <description format="asciidoc">Update `com.code-intelligence:jazzer-api` to version `0.30.0`</description>
+</entry>

src/changelog/.2.x.x/update_com.code-intelligence_jazzer.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="4126" link="https://github.com/apache/logging-log4j2/pull/4126"/>
+  <description format="asciidoc">Update `com.code-intelligence:jazzer` to version `0.30.0`</description>
+</entry>

src/changelog/.2.x.x/update_com.datastax.cassandra_cassandra-driver-core.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="4126" link="https://github.com/apache/logging-log4j2/pull/4126"/>
+  <description format="asciidoc">Update `com.datastax.cassandra:cassandra-driver-core` to version `4.0.0`</description>
+</entry>

src/changelog/.2.x.x/update_com.fasterxml.jackson_jackson-bom.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="4126" link="https://github.com/apache/logging-log4j2/pull/4126"/>
+  <description format="asciidoc">Update `com.fasterxml.jackson:jackson-bom` to version `2.21.3`</description>
+</entry>

src/changelog/.2.x.x/update_com.github.jnr_jnr-ffi.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="4126" link="https://github.com/apache/logging-log4j2/pull/4126"/>
+  <description format="asciidoc">Update `com.github.jnr:jnr-ffi` to version `2.2.19`</description>
+</entry>

src/changelog/.2.x.x/update_com.github.luben_zstd-jni.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="4126" link="https://github.com/apache/logging-log4j2/pull/4126"/>
+  <description format="asciidoc">Update `com.github.luben:zstd-jni` to version `1.5.7-8`</description>
+</entry>

src/changelog/.2.x.x/update_com.github.tomakehurst_wiremock-jre8.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="4126" link="https://github.com/apache/logging-log4j2/pull/4126"/>
+  <description format="asciidoc">Update `com.github.tomakehurst:wiremock-jre8` to version `3.0.1`</description>
+</entry>

src/changelog/.2.x.x/update_com.google.code.java-allocation-instrumenter_java-allocation-instrumenter.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="4126" link="https://github.com/apache/logging-log4j2/pull/4126"/>
+  <description format="asciidoc">Update `com.google.code.java-allocation-instrumenter:java-allocation-instrumenter` to version `3.3.5`</description>
+</entry>

src/changelog/.2.x.x/update_com.google.errorprone_error_prone_annotations.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="4126" link="https://github.com/apache/logging-log4j2/pull/4126"/>
+  <description format="asciidoc">Update `com.google.errorprone:error_prone_annotations` to version `2.49.0`</description>
+</entry>

src/changelog/.2.x.x/update_com.google.guava_guava-testlib.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="4126" link="https://github.com/apache/logging-log4j2/pull/4126"/>
+  <description format="asciidoc">Update `com.google.guava:guava-testlib` to version `33.6.0-jre`</description>
+</entry>