Bump log4j to 2.17.0 - Githubissues

alexa / alexa-skills-kit-sdk-for-java

The Alexa Skills Kit SDK for Java helps you get a skill up and running quickly, letting you focus on skill logic instead of boilerplate code.

http://developer.amazon.com/ask

Apache License 2.0

816 stars 746 forks source link

Bump log4j to 2.17.0 #302

Closed kkocel closed 2 years ago

kkocel commented 2 years ago

Motivation and Context

Move to the most recent version that is known to be free of vulnerabilites.

Types of changes

[x] Bug fix (non-breaking change which fixes an issue)
[ ] New feature (non-breaking change which adds functionality)
[ ] Breaking change (fix or feature that would cause existing functionality to change)

Checklist

[x] My code follows the code style of this project
[ ] My change requires a change to the documentation
[ ] I have updated the documentation accordingly
[ ] I have read the README document
[ ] I have added tests to cover my changes
[x] All new and existing tests passed

License

[x] By submitting this pull request, I confirm that you can use, modify, copy, and redistribute this contribution, under the terms of your choice.

doiron commented 2 years ago

just updated the 2.0.x branch with these changes. thanks for the PR!