From 745b6cfc36293ff7ed6542c0d1818bc75ddf908b Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 10 Apr 2026 23:14:52 +0000
Subject: [PATCH] Bump org.apache.logging.log4j:log4j-core from 2.20.0 to
 2.25.4

Bumps org.apache.logging.log4j:log4j-core from 2.20.0 to 2.25.4.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index bf2a0b9bc..635a47df3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -140,7 +140,7 @@
         <json4s.version>3.7.0-M11</json4s.version>
         <jsr305.version>3.0.0</jsr305.version>
         <libthrift.version>0.12.0</libthrift.version>
-        <log4j.version>2.20.0</log4j.version>
+        <log4j.version>2.25.4</log4j.version>
         <log4j.slf4j-impl>log4j-slf4j2-impl</log4j.slf4j-impl>
         <lz4.version>1.8.0</lz4.version>
         <netty-all.version>4.1.96.Final</netty-all.version>
@@ -163,7 +163,7 @@
         <pure.commons-lang3.version>3.20.0</pure.commons-lang3.version>
         <pure.commons-validator.version>1.10.1</pure.commons-validator.version>
         <pure.gson.version>2.13.2</pure.gson.version>
-        <pure.log4j.version>2.25.3</pure.log4j.version>
+        <pure.log4j.version>2.25.4</pure.log4j.version>
         <pure.velocity.version>2.4.1</pure.velocity.version>
         <pure.snakeyaml.version>2.5</pure.snakeyaml.version>