From 24370d4933aadd7126d5c1f5a6b465884e169324 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 19 Dec 2025 23:20:24 +0000
Subject: [PATCH 1/3] Bump org.apache.logging.log4j:log4j-core in
 /modules/distribution

Bumps org.apache.logging.log4j:log4j-core from 2.18.0 to 2.25.3.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 modules/distribution/pom.xml | 2 +-
 pom.xml                      | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/modules/distribution/pom.xml b/modules/distribution/pom.xml
index 21731b1d..e54dff87 100644
--- a/modules/distribution/pom.xml
+++ b/modules/distribution/pom.xml
@@ -171,7 +171,7 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.18.0</version>
+            <version>2.25.3</version>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
diff --git a/pom.xml b/pom.xml
index d4ff2283..11820ab1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -702,7 +702,7 @@
             <dependency>
                 <groupId>org.apache.logging.log4j</groupId>
                 <artifactId>log4j-core</artifactId>
-                <version>2.24.1</version>
+                <version>2.25.3</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.logging.log4j</groupId>

From 47c186f5a66da338ed6c7f4a9242ffdcca70aa30 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 19 Dec 2025 23:50:12 +0000
Subject: [PATCH 2/3] Bump org.apache.logging.log4j:log4j-core from 2.18.0 to
 2.25.3

Bumps org.apache.logging.log4j:log4j-core from 2.18.0 to 2.25.3.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 modules/distribution/pom.xml        | 2 +-
 modules/rampart-integration/pom.xml | 2 +-
 modules/rampart-samples/pom.xml     | 2 +-
 modules/rampart-tests/pom.xml       | 2 +-
 modules/rampart-trust/pom.xml       | 2 +-
 pom.xml                             | 2 +-
 6 files changed, 6 insertions(+), 6 deletions(-)

diff --git a/modules/distribution/pom.xml b/modules/distribution/pom.xml
index 21731b1d..e54dff87 100644
--- a/modules/distribution/pom.xml
+++ b/modules/distribution/pom.xml
@@ -171,7 +171,7 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.18.0</version>
+            <version>2.25.3</version>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
diff --git a/modules/rampart-integration/pom.xml b/modules/rampart-integration/pom.xml
index ed8fd165..f5092df8 100644
--- a/modules/rampart-integration/pom.xml
+++ b/modules/rampart-integration/pom.xml
@@ -590,7 +590,7 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.24.1</version>
+            <version>2.25.3</version>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
diff --git a/modules/rampart-samples/pom.xml b/modules/rampart-samples/pom.xml
index a957835e..b7aae90d 100644
--- a/modules/rampart-samples/pom.xml
+++ b/modules/rampart-samples/pom.xml
@@ -120,7 +120,7 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.24.1</version>
+            <version>2.25.3</version>
             <scope>test</scope>
         </dependency>
         <dependency>
diff --git a/modules/rampart-tests/pom.xml b/modules/rampart-tests/pom.xml
index 1dc10c3d..9fe67b7f 100644
--- a/modules/rampart-tests/pom.xml
+++ b/modules/rampart-tests/pom.xml
@@ -117,7 +117,7 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.24.1</version>
+            <version>2.25.3</version>
             <scope>test</scope>
         </dependency>
         <dependency>
diff --git a/modules/rampart-trust/pom.xml b/modules/rampart-trust/pom.xml
index 7228cd52..c209ffda 100644
--- a/modules/rampart-trust/pom.xml
+++ b/modules/rampart-trust/pom.xml
@@ -110,7 +110,7 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.24.1</version>
+            <version>2.25.3</version>
             <scope>test</scope>
         </dependency>
         <dependency>
diff --git a/pom.xml b/pom.xml
index d4ff2283..11820ab1 100644
--- a/pom.xml
+++ b/pom.xml
@@ -702,7 +702,7 @@
             <dependency>
                 <groupId>org.apache.logging.log4j</groupId>
                 <artifactId>log4j-core</artifactId>
-                <version>2.24.1</version>
+                <version>2.25.3</version>
             </dependency>
             <dependency>
                 <groupId>org.apache.logging.log4j</groupId>

From 8f5b1967ee568705c32ef8f1a536a7fedd4270ae Mon Sep 17 00:00:00 2001
From: Christian Ortlepp <christian.ortlepp@hypergene.com>
Date: Tue, 7 Apr 2026 16:23:55 +0200
Subject: [PATCH 3/3] chore: unify log4j deps and update them

---
 modules/distribution/pom.xml        |  6 +-----
 modules/rampart-integration/pom.xml |  8 ++------
 modules/rampart-samples/pom.xml     |  8 ++------
 modules/rampart-tests/pom.xml       |  8 ++------
 modules/rampart-trust/pom.xml       |  8 ++------
 pom.xml                             | 22 +++++-----------------
 6 files changed, 14 insertions(+), 46 deletions(-)

diff --git a/modules/distribution/pom.xml b/modules/distribution/pom.xml
index e54dff87..c5a4c687 100644
--- a/modules/distribution/pom.xml
+++ b/modules/distribution/pom.xml
@@ -139,7 +139,7 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-bom</artifactId>
-            <version>2.24.1</version>
+            <version>${log4j.version}</version>
             <type>pom</type>
             <scope>import</scope>
         </dependency>
@@ -147,7 +147,6 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-jcl</artifactId>
-            <version>2.18.0</version>
             <exclusions>
                 <exclusion>
                     <groupId>commons-logging</groupId>
@@ -159,7 +158,6 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-slf4j-impl</artifactId>
-            <version>2.18.0</version>
             <exclusions>
                 <exclusion>
                     <groupId>org.slf4j</groupId>
@@ -171,12 +169,10 @@
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.25.3</version>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-api</artifactId>
-            <version>2.18.0</version>
         </dependency>
     </dependencies>
 
diff --git a/modules/rampart-integration/pom.xml b/modules/rampart-integration/pom.xml
index f5092df8..15ca123d 100644
--- a/modules/rampart-integration/pom.xml
+++ b/modules/rampart-integration/pom.xml
@@ -582,25 +582,21 @@
             <groupId>junit</groupId>
             <artifactId>junit</artifactId>
         </dependency>
-	<dependency>
+	    <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-jul</artifactId>
-            <version>2.24.1</version>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.25.3</version>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-api</artifactId>
-            <version>2.24.1</version>
         </dependency>
-	<dependency>
+	    <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-jcl</artifactId>
-            <version>2.24.1</version>
         </dependency>
         <dependency>
             <groupId>org.apache.axis2</groupId>
diff --git a/modules/rampart-samples/pom.xml b/modules/rampart-samples/pom.xml
index b7aae90d..8f43b60a 100644
--- a/modules/rampart-samples/pom.xml
+++ b/modules/rampart-samples/pom.xml
@@ -111,28 +111,24 @@
             <version>1.10.15</version>
             <scope>test</scope>
         </dependency>
-	<dependency>
+	    <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-jul</artifactId>
-            <version>2.24.1</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.25.3</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-api</artifactId>
-            <version>2.24.1</version>
             <scope>test</scope>
         </dependency>
-	<dependency>
+	    <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-jcl</artifactId>
-            <version>2.24.1</version>
             <scope>test</scope>
         </dependency>
         <dependency>
diff --git a/modules/rampart-tests/pom.xml b/modules/rampart-tests/pom.xml
index 9fe67b7f..5e6f22ef 100644
--- a/modules/rampart-tests/pom.xml
+++ b/modules/rampart-tests/pom.xml
@@ -108,28 +108,24 @@
             <version>${project.version}</version>
             <scope>test</scope>
         </dependency>
-	<dependency>
+	    <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-jul</artifactId>
-            <version>2.24.1</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.25.3</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-api</artifactId>
-            <version>2.24.1</version>
             <scope>test</scope>
         </dependency>
-	<dependency>
+	    <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-jcl</artifactId>
-            <version>2.24.1</version>
             <scope>test</scope>
         </dependency>
         <dependency>
diff --git a/modules/rampart-trust/pom.xml b/modules/rampart-trust/pom.xml
index c209ffda..64f5c162 100644
--- a/modules/rampart-trust/pom.xml
+++ b/modules/rampart-trust/pom.xml
@@ -101,28 +101,24 @@
             <artifactId>junit</artifactId>
             <scope>test</scope>
         </dependency>
-	<dependency>
+	    <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-jul</artifactId>
-            <version>2.24.1</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-core</artifactId>
-            <version>2.25.3</version>
             <scope>test</scope>
         </dependency>
         <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-api</artifactId>
-            <version>2.24.1</version>
             <scope>test</scope>
         </dependency>
-	<dependency>
+	    <dependency>
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-jcl</artifactId>
-            <version>2.24.1</version>
             <scope>test</scope>
         </dependency>
     </dependencies>
diff --git a/pom.xml b/pom.xml
index 156f611d..22b6b9ff 100644
--- a/pom.xml
+++ b/pom.xml
@@ -696,23 +696,10 @@
             </dependency>
             <dependency>
                 <groupId>org.apache.logging.log4j</groupId>
-                <artifactId>log4j-jul</artifactId>
-                <version>2.24.1</version>
-            </dependency>
-            <dependency>
-                <groupId>org.apache.logging.log4j</groupId>
-                <artifactId>log4j-core</artifactId>
-                <version>2.25.3</version>
-            </dependency>
-            <dependency>
-                <groupId>org.apache.logging.log4j</groupId>
-                <artifactId>log4j-api</artifactId>
-                <version>2.24.1</version>
-            </dependency>
-            <dependency>
-                <groupId>org.apache.logging.log4j</groupId>
-                <artifactId>log4j-jcl</artifactId>
-                <version>2.24.1</version>
+                <artifactId>log4j-bom</artifactId>
+                <version>${log4j.version}</version>
+                <type>pom</type>
+                <scope>import</scope>
             </dependency>
             <dependency>
                 <groupId>org.slf4j</groupId>
@@ -857,6 +844,7 @@
 
         <jacoco.version>0.8.12</jacoco.version>
         <slf4j.version>2.0.16</slf4j.version>
+        <log4j.version>2.25.4</log4j.version>
 	<!-- see the parent artifact 'apache' i.e 33, it defaults to a older version--> 
         <maven.compiler.target>11</maven.compiler.target>
     </properties>