Bump log4j-core from 2.16.0 to 2.17.0 (opensearch-project#1535)

Bumps log4j-core from 2.16.0 to 2.17.0. --- updated-dependencies: - dependency-name: org.apache.logging.log4j:log4j-core dependency-type: direct:production ... Signed-off-by: dependabot[bot] <[email protected]> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
ochprince · Dec 20, 2021 · 76542e6 · 76542e6
1 parent 6983cab
commit 76542e6
Showing 1 changed file with 1 addition and 1 deletion.
diff --git a/pom.xml b/pom.xml
@@ -73,7 +73,7 @@
         <!-- deps -->
         <netty-native.version>2.0.25.Final</netty-native.version>
         <bc.version>1.67</bc.version>
-        <log4j.version>2.16.0</log4j.version>
+        <log4j.version>2.17.0</log4j.version>
         <guava.version>25.1-jre</guava.version>
         <commons.cli.version>1.3.1</commons.cli.version>
         <jackson-databind.version>2.11.2</jackson-databind.version>