Skip to content

fix(deps): bump the prod-deps group across 1 directory with 3 updates - #143

Open
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/prod-deps-8a3e168b20
Open

fix(deps): bump the prod-deps group across 1 directory with 3 updates#143
dependabot[bot] wants to merge 1 commit into
masterfrom
dependabot/maven/prod-deps-8a3e168b20

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jun 22, 2026

Copy link
Copy Markdown
Contributor

Bumps the prod-deps group with 3 updates in the / directory: org.apache.logging.log4j:log4j-bom, io.vertx:vertx-stack-depchain and software.amazon.awssdk:ssm.

Updates org.apache.logging.log4j:log4j-bom from 2.25.4 to 2.26.1

Release notes

Sourced from org.apache.logging.log4j:log4j-bom's releases.

2.26.1

This patch release delivers certain fixes on top of 2.26.0.

Changed

  • Improve logging for LinkageError scenarios involving the LMAX Disruptor library (#2250, #4124)

Fixed

  • Fix the createOnDemand behavior of RollingFileAppender to correctly defer file and directory creation until the first log event, while preserving eager creation when disabled. (#2006, #4072)
  • Improve documentation for locale handling in the Pattern Layout date pattern converter (#4129, #4130)
  • Fix handling of non-finite numbers while encoding MapMessage to JSON (#4163)
  • Fix encoding of MSGID and SD-ID fields of StructuredDataMessage to XML (#4136)
  • Fix stack trace rendering for exceptions with identity malfunction (e.g., colliding equals() and/or hashCode() implementations) (#3933, #4133)
  • Fix resource leaks in ConfigurationSource when loading configuration via URL fails (#4127)
  • Fix KafkaAppender reporting error to error handler even after a successful retry (#4125)

2.26.0

This minor release delivers all the fixes in the [2.25.0, 2.25.4] version range, plus some new fixes, and several other improvements and features.

Added

  • Add a new ConfigurationFactory::getConfiguration method accepting multiple URIs (#3775, #3921)
  • Add and export org.apache.logging.log4j.core.pattern.NamedInstantPattern enabling users to programmatically access named date & time patterns supported by Pattern Layout (#3789)
  • Add log4j.plugin.processor.minAllowedMessageKind annotation processor option to PluginProcessor to filter diagnostic messages by severity. This allows builds that treat compiler notes as errors (e.g. Maven with -Werror) to suppress informational notes emitted during normal plugin processing. (apache/logging-log4j2#3380, #4063)
  • Add missing setters to Rfc5424LayoutBuilder

Changed

  • Ensure scripts in the global Scripts element have explicit names by throwing a ConfigurationException for unnamed ones. (#3176)
  • Simplify file manager registry factory methods (#3968)

Deprecated

  • Deprecated withers in builder classes in favor of setters. This change improves API consistency with Log4j Core 3 and helps users adapt to the upcoming changes. (#3750)

Fixed

  • Fix script resolution failure when the Scripts element is placed after a ScriptRef in the configuration. (#3336)
  • Fix ArrayIndexOutOfBoundsException thrown by ThrowableStackTraceRenderer when the stack trace is modified concurrently (#3940, #3955)
  • Fix SLF4JLogger.atFatal() returning atLevel(Level.TRACE) instead of atLevel(Level.FATAL). This was causing FATAL-level log events to be silently discarded when using the fluent API through the log4j-to-slf4j bridge. (#4068, #4089)
  • Fix Javadoc references across module boundaries (i.e., cross-references) (#4099, #4100)
  • Fix header write in RollingRandomAccessFileManager that was being incorrectly skipped if append=true and the file didn't exist before
  • Fix a properties file configuration regression caused by not referenced loggers, appenders, and filters (#4036, #4069)

Removed

  • Remove the jvmrunargs lookup. (#3874)

Updated

... (truncated)

Commits
  • dd0f9d2 Release changelog for version 2.26.1
  • efbb638 Update the project.build.outputTimestamp property
  • c9332be Fix handling of non-finite numbers while encoding MapMessage to JSON (#4163)
  • bd8eca1 Fix AsciiDoc typo in pattern-layout.adoc
  • df1c753 tidy up changelogs
  • 0592cff fix version in pom.xml
  • e320257 Release changelog for version 2.26.1
  • 5755541 Update the project.build.outputTimestamp property
  • 6c2d931 Set version to 2.26.1
  • 69d6641 add patch release/2.26.1 liked commits and moved changelog the release/2.26.1...
  • Additional commits viewable in compare view

Updates io.vertx:vertx-stack-depchain from 5.0.11 to 5.1.6

Updates software.amazon.awssdk:ssm from 2.42.37 to 2.54.7

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 22, 2026
@dependabot
dependabot Bot requested a review from a team as a code owner June 22, 2026 21:43
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jun 22, 2026
@dependabot dependabot Bot changed the title fix(deps): bump the prod-deps group with 3 updates fix(deps): bump the prod-deps group across 1 directory with 3 updates Aug 10, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/prod-deps-8a3e168b20 branch from 7e52718 to c7d1ba0 Compare August 10, 2026 21:44
Bumps the prod-deps group with 3 updates in the / directory: [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2), io.vertx:vertx-stack-depchain and software.amazon.awssdk:ssm.


Updates `org.apache.logging.log4j:log4j-bom` from 2.25.4 to 2.26.1
- [Release notes](https://github.com/apache/logging-log4j2/releases)
- [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc)
- [Commits](apache/logging-log4j2@rel/2.25.4...rel/2.26.1)

Updates `io.vertx:vertx-stack-depchain` from 5.0.11 to 5.1.6

Updates `software.amazon.awssdk:ssm` from 2.42.37 to 2.54.7

---
updated-dependencies:
- dependency-name: io.vertx:vertx-stack-depchain
  dependency-version: 5.1.3
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: org.apache.logging.log4j:log4j-bom
  dependency-version: 2.26.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
- dependency-name: software.amazon.awssdk:ssm
  dependency-version: 2.46.15
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: prod-deps
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/prod-deps-8a3e168b20 branch from c7d1ba0 to db757a0 Compare August 31, 2026 21:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants