Bump log4j2 from 2.21.0 to 2.25.1

Signed-off-by: Andrey Pleskach <[email protected]>

Author: willyborankin

CHANGELOG.md

@@ -51,6 +51,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Bump Slf4j from 1.7.36 to 2.0.17 ([#19136](https://github.com/opensearch-project/OpenSearch/pull/19136))
 - Bump `org.apache.tika` from 2.9.2 to 3.2.2 ([#19125](https://github.com/opensearch-project/OpenSearch/pull/19125))
 - Bump `org.apache.commons:commons-compress` from 1.26.1 to 1.28.0 ([#19125](https://github.com/opensearch-project/OpenSearch/pull/19125))
+- Bump `log4j2` from 2.21.0 to 2.25.1 ([#19184](https://github.com/opensearch-project/OpenSearch/pull/19184))
 
 ### Deprecated
 

gradle/libs.versions.toml

@@ -13,7 +13,8 @@ jackson_databind  = "2.18.2"
 snakeyaml         = "2.1"
 icu4j             = "77.1"
 supercsv          = "2.4.0"
-log4j             = "2.21.0"
+log4j             = "2.25.1"
+errorprone_anntations = "2.41.0"
 slf4j             = "2.0.17"
 asm               = "9.7"
 jettison          = "1.5.4"

libs/core/licenses/log4j-api-2.21.0.jar.sha1

@@ -0,0 +1 @@
+c7acbbd6f110cd1457c628da46245e355b1ee57a

libs/core/licenses/log4j-api-2.25.1.jar.sha1

@@ -23,8 +23,11 @@ testClusters {
 dependencies {
   compileOnly "com.google.code.findbugs:jsr305:3.0.2"
   runtimeOnly "com.google.guava:guava:${versions.guava}"
-  implementation "com.google.errorprone:error_prone_annotations:2.24.1"
-  implementation "com.google.guava:failureaccess:1.0.2"
+
+  compileOnly "com.github.spotbugs:spotbugs-annotations:4.9.4"
+  compileOnly "com.google.errorprone:error_prone_annotations:${versions.errorprone_anntations}"
+  compileOnly "com.google.guava:failureaccess:1.0.2"
+
   implementation "io.grpc:grpc-api:${versions.grpc}"
   implementation "io.grpc:grpc-core:${versions.grpc}"
   implementation "io.grpc:grpc-netty-shaded:${versions.grpc}"

modules/transport-grpc/build.gradle

@@ -54,7 +54,8 @@ dependencies {
   runtimeOnly "io.grpc:grpc-core:${versions.grpc}"
   implementation "io.grpc:grpc-stub:${versions.grpc}"
   implementation "io.grpc:grpc-netty:${versions.grpc}"
-  implementation "com.google.errorprone:error_prone_annotations:2.31.0"
+
+  compileOnly "com.google.errorprone:error_prone_annotations:${versions.errorprone_anntations}"
 
   runtimeOnly group: 'com.google.code.findbugs', name: 'jsr305', version: '3.0.2'
   annotationProcessor 'org.immutables:value:2.10.1'

plugins/arrow-flight-rpc/build.gradle

@@ -0,0 +1 @@
+08b3667ec8ee781429169b612b7ca6d6a30682b9

plugins/crypto-kms/licenses/log4j-1.2-api-2.21.0.jar.sha1

@@ -0,0 +1 @@
+08b3667ec8ee781429169b612b7ca6d6a30682b9