From 0d32025ff12edadc79591696c085c3bbc7680608 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 19 Dec 2025 22:51:52 +0000
Subject: [PATCH] Bump org.apache.logging.log4j:log4j-core in
 /helix-view-aggregator

Bumps org.apache.logging.log4j:log4j-core from 2.17.1 to 2.25.3.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 helix-view-aggregator/pom.xml | 2 +-
 pom.xml                       | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/helix-view-aggregator/pom.xml b/helix-view-aggregator/pom.xml
index 5f90da2d78..fbabb77fe1 100644
--- a/helix-view-aggregator/pom.xml
+++ b/helix-view-aggregator/pom.xml
@@ -70,7 +70,7 @@ under the License.
     <dependency>
       <groupId>org.apache.logging.log4j</groupId>
       <artifactId>log4j-core</artifactId>
-      <version>2.17.1</version>
+      <version>2.25.3</version>
     </dependency>
     <dependency>
       <groupId>org.apache.helix</groupId>
diff --git a/pom.xml b/pom.xml
index c31af010c9..c0362145bd 100644
--- a/pom.xml
+++ b/pom.xml
@@ -492,7 +492,7 @@
       <dependency>
         <groupId>org.apache.logging.log4j</groupId>
         <artifactId>log4j-core</artifactId>
-        <version>2.17.1</version>
+        <version>2.25.3</version>
       </dependency>
       <dependency>
         <groupId>org.apache.logging.log4j</groupId>