From 2c3943aec7e2d2e1e7bf4050a4135c1ac449eaef Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 16 Dec 2024 04:54:20 +0000 Subject: [PATCH 1/3] Bump org.apache.logging.log4j:log4j-bom from 2.24.2 to 2.24.3 Bumps [org.apache.logging.log4j:log4j-bom](https://github.com/apache/logging-log4j2) from 2.24.2 to 2.24.3. - [Release notes](https://github.com/apache/logging-log4j2/releases) - [Changelog](https://github.com/apache/logging-log4j2/blob/2.x/RELEASE-NOTES.adoc) - [Commits](https://github.com/apache/logging-log4j2/compare/rel/2.24.2...rel/2.24.3) --- updated-dependencies: - dependency-name: org.apache.logging.log4j:log4j-bom dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] --- pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/pom.xml b/pom.xml index cd56578c9a9..ff2a723f251 100644 --- a/pom.xml +++ b/pom.xml @@ -107,7 +107,7 @@ 2.0.69.Final 4.1.115.Final 1.0.2 - 2.24.2 + 2.24.3 1.7.36 4.2.28 5.14.2 From 4fd8c8b15c2c69effcbcadfbf4a85b4d855075f1 Mon Sep 17 00:00:00 2001 From: Richard Zowalla Date: Mon, 16 Dec 2024 21:43:58 +0100 Subject: [PATCH 2/3] License --- DEPENDENCY-LICENSES | 10 +++++----- LICENSE-binary | 10 +++++----- 2 files changed, 10 insertions(+), 10 deletions(-) diff --git a/DEPENDENCY-LICENSES b/DEPENDENCY-LICENSES index e94f289bce9..42d794ba102 100644 --- a/DEPENDENCY-LICENSES +++ b/DEPENDENCY-LICENSES @@ -92,10 +92,10 @@ List of third-party dependencies grouped by their license type. * Apache HttpCore (org.apache.httpcomponents:httpcore:4.4.16 - http://hc.apache.org/httpcomponents-core-ga) * Apache Ivy (org.apache.ivy:ivy:2.4.0 - http://ant.apache.org/ivy/) * Apache Kafka (org.apache.kafka:kafka-clients:3.9.0 - https://kafka.apache.org) - * Apache Log4j 1.x Compatibility API (org.apache.logging.log4j:log4j-1.2-api:2.24.2 - https://logging.apache.org/log4j/2.x/log4j/log4j-1.2-api/) - * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.24.2 - https://logging.apache.org/log4j/2.x/log4j/log4j-api/) - * Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.24.2 - https://logging.apache.org/log4j/2.x/log4j/log4j-core/) - * Apache Log4j Web (org.apache.logging.log4j:log4j-web:2.24.2 - https://logging.apache.org/log4j/2.x/log4j/log4j-web/) + * Apache Log4j 1.x Compatibility API (org.apache.logging.log4j:log4j-1.2-api:2.24.3 - https://logging.apache.org/log4j/2.x/log4j/log4j-1.2-api/) + * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.24.3 - https://logging.apache.org/log4j/2.x/log4j/log4j-api/) + * Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.24.3 - https://logging.apache.org/log4j/2.x/log4j/log4j-core/) + * Apache Log4j Web (org.apache.logging.log4j:log4j-web:2.24.3 - https://logging.apache.org/log4j/2.x/log4j/log4j-web/) * Apache Maven Shade Plugin (org.apache.maven.plugins:maven-shade-plugin:3.6.0 - https://maven.apache.org/plugins/maven-shade-plugin/) * Apache Maven Shared Utils (org.apache.maven.shared:maven-shared-utils:3.2.1 - https://maven.apache.org/shared/maven-shared-utils/) * Apache Parquet Hadoop Bundle (org.apache.parquet:parquet-hadoop-bundle:1.10.0 - https://parquet.apache.org) @@ -342,7 +342,7 @@ List of third-party dependencies grouped by their license type. * Prometheus Metrics Tracer OpenTelemetry (io.prometheus:prometheus-metrics-tracer-otel:1.3.3 - https://github.com/prometheus/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-otel) * Prometheus Metrics Tracer OpenTelemetry Agent (io.prometheus:prometheus-metrics-tracer-otel-agent:1.3.3 - https://github.com/prometheus/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-otel-agent) * sigar (org.fusesource:sigar:1.6.4 - http://fusesource.com/sigar/) - * SLF4J 1 Binding for Log4j API (org.apache.logging.log4j:log4j-slf4j-impl:2.24.2 - https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j-impl/) + * SLF4J 1 Binding for Log4j API (org.apache.logging.log4j:log4j-slf4j-impl:2.24.3 - https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j-impl/) * SnakeYAML (org.yaml:snakeyaml:2.2 - https://bitbucket.org/snakeyaml/snakeyaml) * snappy-java (org.xerial.snappy:snappy-java:1.1.10.7 - https://github.com/xerial/snappy-java) * Spring AOP (org.springframework:spring-aop:5.3.27 - https://github.com/spring-projects/spring-framework) diff --git a/LICENSE-binary b/LICENSE-binary index 69ed4bb09aa..45405d98c89 100644 --- a/LICENSE-binary +++ b/LICENSE-binary @@ -731,11 +731,11 @@ The license texts of these dependencies can be found in the licenses directory. * Apache HttpCore (org.apache.httpcomponents:httpcore:4.4.16 - http://hc.apache.org/httpcomponents-core-ga) * Apache Ivy (org.apache.ivy:ivy:2.4.0 - http://ant.apache.org/ivy/) * Apache Kafka (org.apache.kafka:kafka-clients:3.9.0 - https://kafka.apache.org) - * Apache Log4j 1.x Compatibility API (org.apache.logging.log4j:log4j-1.2-api:2.24.2 - https://logging.apache.org/log4j/2.x/log4j-1.2-api/) - * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.24.2 - https://logging.apache.org/log4j/2.x/log4j-api/) - * Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.24.2 - https://logging.apache.org/log4j/2.x/log4j-core/) - * Apache Log4j SLF4J Binding (org.apache.logging.log4j:log4j-slf4j-impl:2.24.2 - https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/) - * Apache Log4j Web (org.apache.logging.log4j:log4j-web:2.24.2 - https://logging.apache.org/log4j/2.x/log4j-web/) + * Apache Log4j 1.x Compatibility API (org.apache.logging.log4j:log4j-1.2-api:2.24.3 - https://logging.apache.org/log4j/2.x/log4j-1.2-api/) + * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.24.3 - https://logging.apache.org/log4j/2.x/log4j-api/) + * Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.24.3 - https://logging.apache.org/log4j/2.x/log4j-core/) + * Apache Log4j SLF4J Binding (org.apache.logging.log4j:log4j-slf4j-impl:2.24.3 - https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/) + * Apache Log4j Web (org.apache.logging.log4j:log4j-web:2.24.3 - https://logging.apache.org/log4j/2.x/log4j-web/) * Apache Parquet Hadoop Bundle (org.apache.parquet:parquet-hadoop-bundle:1.10.0 - https://parquet.apache.org) * Apache Thrift (org.apache.thrift:libfb303:0.9.3 - http://thrift.apache.org) * Apache Thrift (org.apache.thrift:libthrift:0.19.0 - http://thrift.apache.org) From a46c30cdeac934b09e5defbafcd8f309bb07699b Mon Sep 17 00:00:00 2001 From: Richard Zowalla Date: Tue, 17 Dec 2024 07:00:23 +0100 Subject: [PATCH 3/3] fix license --- LICENSE-binary | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/LICENSE-binary b/LICENSE-binary index 6e9e03fb474..b8713234776 100644 --- a/LICENSE-binary +++ b/LICENSE-binary @@ -709,7 +709,7 @@ The license texts of these dependencies can be found in the licenses directory. * Apache Kafka (org.apache.kafka:kafka-clients:3.9.0 - https://kafka.apache.org) * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.24.3 - https://logging.apache.org/log4j/2.x/log4j-api/) * Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.24.3 - https://logging.apache.org/log4j/2.x/log4j-core/) - * Apache Log4j SLF4J Binding (org.apache.logging.log4j:log4j-slf4j-impl:2.24.2 - https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/) + * Apache Log4j SLF4J Binding (org.apache.logging.log4j:log4j-slf4j-impl:2.24.3 - https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/) * Apache Thrift (org.apache.thrift:libthrift:0.19.0 - http://thrift.apache.org) * Apache Yetus - Audience Annotations (org.apache.yetus:audience-annotations:0.12.0 - https://yetus.apache.org/audience-annotations) * Apache Yetus - Audience Annotations (org.apache.yetus:audience-annotations:0.13.0 - https://yetus.apache.org/audience-annotations)