Upgrade log4j version

GradleUp · Dec 15, 2021 · 402c14f · 402c14f
1 parent dda450a
commit 402c14f
Show file tree

Hide file tree

Showing 3 changed files with 4 additions and 2 deletions.
diff --git a/gradle/dependencies.gradle b/gradle/dependencies.gradle
@@ -10,7 +10,7 @@ dependencies {
     implementation 'commons-io:commons-io:2.11.0'
     implementation 'org.apache.ant:ant:1.10.11'
     implementation 'org.codehaus.plexus:plexus-utils:3.4.1'
-    implementation "org.apache.logging.log4j:log4j-core:2.14.1"
+    implementation "org.apache.logging.log4j:log4j-core:2.16.0"
     implementation('org.vafer:jdependency:2.7.0') {
         exclude group: 'org.ow2.asm'
     }

diff --git a/src/docs/changes/README.md b/src/docs/changes/README.md
@@ -1,4 +1,6 @@
 # Change Log
+## v7.1.1 (2021-12-14)
+* Upgrade log4j to 2.16.0 due to CVE-2021-44228 and CVE-2021-45046
 
 ## v7.1.0 (2021-10-04)
 * **BREAKING** - The maven coordinates for the plugins have changed as of this version. The proper `group:artifact` is `gradle.plugin.com.github.johnrengelman:shadow`

diff --git a/src/main/resources/shadow-version.txt b/src/main/resources/shadow-version.txt
@@ -1 +1 @@
-7.1.0
+7.1.1