From e92c10686432066545cbc6b3a3f4b14a8bbe9d2d Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sun, 12 Apr 2026 23:58:14 +0000
Subject: [PATCH] chore(deps): bump the maven group across 8 directories with 2
 updates

Bumps the maven group with 2 updates in the /component-runtime-impl directory: org.apache.logging.log4j:log4j-core and org.apache.tomcat:tomcat-catalina.
Bumps the maven group with 2 updates in the /component-starter-server directory: org.apache.logging.log4j:log4j-core and org.apache.tomcat:tomcat-catalina.
Bumps the maven group with 2 updates in the /component-tools directory: org.apache.logging.log4j:log4j-core and org.apache.tomcat:tomcat-catalina.
Bumps the maven group with 2 updates in the /component-tools-webapp directory: org.apache.logging.log4j:log4j-core and org.apache.tomcat:tomcat-catalina.
Bumps the maven group with 2 updates in the /documentation directory: org.apache.logging.log4j:log4j-core and org.apache.tomcat:tomcat-catalina.
Bumps the maven group with 2 updates in the /reporting directory: org.apache.logging.log4j:log4j-core and org.apache.tomcat:tomcat-catalina.
Bumps the maven group with 2 updates in the /talend-component-maven-plugin directory: org.apache.logging.log4j:log4j-core and org.apache.tomcat:tomcat-catalina.
Bumps the maven group with 2 updates in the /vault-client directory: org.apache.logging.log4j:log4j-core and org.apache.tomcat:tomcat-catalina.


Updates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4

Updates `org.apache.tomcat:tomcat-catalina` from 9.0.113 to 9.0.117

Updates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4

Updates `org.apache.tomcat:tomcat-catalina` from 9.0.113 to 9.0.117

Updates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4

Updates `org.apache.tomcat:tomcat-catalina` from 9.0.113 to 9.0.117

Updates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4

Updates `org.apache.tomcat:tomcat-catalina` from 9.0.113 to 9.0.117

Updates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4

Updates `org.apache.tomcat:tomcat-catalina` from 9.0.113 to 9.0.117

Updates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4

Updates `org.apache.tomcat:tomcat-catalina` from 9.0.113 to 9.0.117

Updates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4

Updates `org.apache.tomcat:tomcat-catalina` from 9.0.113 to 9.0.117

Updates `org.apache.logging.log4j:log4j-core` from 2.25.3 to 2.25.4

Updates `org.apache.tomcat:tomcat-catalina` from 9.0.113 to 9.0.117

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.tomcat:tomcat-catalina
  dependency-version: 9.0.117
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.tomcat:tomcat-catalina
  dependency-version: 9.0.117
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.tomcat:tomcat-catalina
  dependency-version: 9.0.117
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.tomcat:tomcat-catalina
  dependency-version: 9.0.117
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.tomcat:tomcat-catalina
  dependency-version: 9.0.117
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.tomcat:tomcat-catalina
  dependency-version: 9.0.117
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.tomcat:tomcat-catalina
  dependency-version: 9.0.117
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.tomcat:tomcat-catalina
  dependency-version: 9.0.117
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index b576f408ed6fe..4ec66895e4c01 100644
--- a/pom.xml
+++ b/pom.xml
@@ -173,7 +173,7 @@
     <ziplock.test.version>8.0.14</ziplock.test.version>
     <meecrowave.version>1.2.15</meecrowave.version>
     <owb.version>2.0.27</owb.version>
-    <tomcat.version>9.0.113</tomcat.version>
+    <tomcat.version>9.0.117</tomcat.version>
     <cxf.version>3.5.11</cxf.version>
 
     <woodstox.version>6.5.0</woodstox.version>
@@ -297,7 +297,7 @@
 
     <johnzon.version>1.2.21</johnzon.version>
     <slf4j.version>1.7.34</slf4j.version>
-    <log4j2.version>2.25.3</log4j2.version>
+    <log4j2.version>2.25.4</log4j2.version>
     <rhino.version>1.9.0</rhino.version>
     <tomitribe-crest.version>0.32</tomitribe-crest.version>
     <httpclient.version>4.5.14</httpclient.version>