From a0ed228cd3b6abf171b0c6bd0323378b224def12 Mon Sep 17 00:00:00 2001 From: Brian Harrington Date: Fri, 13 Dec 2024 19:30:49 -0600 Subject: [PATCH] update log4j 2.24.1 has a critical bug that can lead to NPE. --- dependencies.properties | 10 +++++----- 1 file changed, 5 insertions(+), 5 deletions(-) diff --git a/dependencies.properties b/dependencies.properties index d6d4f2532..0f24bb295 100644 --- a/dependencies.properties +++ b/dependencies.properties @@ -20,11 +20,11 @@ io.micrometer:micrometer-core = 1.14.0 javax.inject:javax.inject = 1 net.openhft:zero-allocation-hashing = 0.16 nl.jqno.equalsverifier:equalsverifier = 3.17.3 -org.apache.logging.log4j:log4j-api = 2.24.1 -org.apache.logging.log4j:log4j-core = 2.24.1 -org.apache.logging.log4j:log4j-jcl = 2.24.1 -org.apache.logging.log4j:log4j-jul = 2.24.1 -org.apache.logging.log4j:log4j-slf4j-impl = 2.24.1 +org.apache.logging.log4j:log4j-api = 2.24.3 +org.apache.logging.log4j:log4j-core = 2.24.3 +org.apache.logging.log4j:log4j-jcl = 2.24.3 +org.apache.logging.log4j:log4j-jul = 2.24.3 +org.apache.logging.log4j:log4j-slf4j-impl = 2.24.3 org.hsqldb:hsqldb = 2.7.3 org.junit.jupiter:junit-jupiter-engine = 5.11.3 org.slf4j:slf4j-api = 1.7.36