From 59d4d83373f35dd4c71aac65a6b12819ceea927f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 10 Apr 2026 23:16:38 +0000
Subject: [PATCH] Bump the maven group across 3 directories with 3 updates

Bumps the maven group with 3 updates in the / directory: org.apache.logging.log4j:log4j-core, org.apache.commons:commons-lang3 and [com.microsoft.sqlserver:mssql-jdbc](https://github.com/Microsoft/mssql-jdbc).
Bumps the maven group with 1 update in the /build/ci/updater directory: [com.microsoft.sqlserver:mssql-jdbc](https://github.com/Microsoft/mssql-jdbc).
Bumps the maven group with 3 updates in the /xmppserver directory: org.apache.logging.log4j:log4j-core, org.apache.commons:commons-lang3 and [com.microsoft.sqlserver:mssql-jdbc](https://github.com/Microsoft/mssql-jdbc).


Updates `org.apache.logging.log4j:log4j-core` from 2.20.0 to 2.25.4

Updates `org.apache.commons:commons-lang3` from 3.9 to 3.18.0

Updates `com.microsoft.sqlserver:mssql-jdbc` from 9.4.1.jre11 to 10.2.4.jre11
- [Release notes](https://github.com/Microsoft/mssql-jdbc/releases)
- [Changelog](https://github.com/microsoft/mssql-jdbc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Microsoft/mssql-jdbc/commits)

Updates `com.microsoft.sqlserver:mssql-jdbc` from 9.4.1.jre11 to 10.2.4.jre11
- [Release notes](https://github.com/Microsoft/mssql-jdbc/releases)
- [Changelog](https://github.com/microsoft/mssql-jdbc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Microsoft/mssql-jdbc/commits)

Updates `org.apache.logging.log4j:log4j-core` from 2.20.0 to 2.25.4

Updates `org.apache.commons:commons-lang3` from 3.9 to 3.18.0

Updates `com.microsoft.sqlserver:mssql-jdbc` from 9.4.1.jre11 to 10.2.4.jre11
- [Release notes](https://github.com/Microsoft/mssql-jdbc/releases)
- [Changelog](https://github.com/microsoft/mssql-jdbc/blob/main/CHANGELOG.md)
- [Commits](https://github.com/Microsoft/mssql-jdbc/commits)

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.18.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.microsoft.sqlserver:mssql-jdbc
  dependency-version: 10.2.4.jre11
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.microsoft.sqlserver:mssql-jdbc
  dependency-version: 10.2.4.jre11
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.4
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.commons:commons-lang3
  dependency-version: 3.18.0
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: com.microsoft.sqlserver:mssql-jdbc
  dependency-version: 10.2.4.jre11
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 build/ci/updater/pom.xml | 2 +-
 pom.xml                  | 2 +-
 xmppserver/pom.xml       | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/build/ci/updater/pom.xml b/build/ci/updater/pom.xml
index ebc513e8f3..4c37b0cefa 100644
--- a/build/ci/updater/pom.xml
+++ b/build/ci/updater/pom.xml
@@ -72,7 +72,7 @@
     <dependency>
       <groupId>com.microsoft.sqlserver</groupId>
       <artifactId>mssql-jdbc</artifactId>
-      <version>9.4.1.jre11</version>
+      <version>10.2.4.jre11</version>
     </dependency>
     <dependency> <!-- OF-2960: Including dependencies of ojdbc11-production rather than ojdbc11-production itself. -->
       <groupId>com.oracle.database.jdbc</groupId>
diff --git a/pom.xml b/pom.xml
index 0e38eea4aa..55fc89ccb2 100644
--- a/pom.xml
+++ b/pom.xml
@@ -125,7 +125,7 @@
         <netty.version>4.1.118.Final</netty.version>
         <bouncycastle.version>1.78.1</bouncycastle.version>
         <slf4j.version>2.0.9</slf4j.version>
-        <log4j.version>2.20.0</log4j.version>
+        <log4j.version>2.25.4</log4j.version>
         <ojdbc.version>23.7.0.25.01</ojdbc.version>
     </properties>
 
diff --git a/xmppserver/pom.xml b/xmppserver/pom.xml
index d82aeda3c9..6620ba96dd 100644
--- a/xmppserver/pom.xml
+++ b/xmppserver/pom.xml
@@ -387,7 +387,7 @@
         <dependency>
             <groupId>org.apache.commons</groupId>
             <artifactId>commons-lang3</artifactId>
-            <version>3.9</version>
+            <version>3.18.0</version>
         </dependency>
         <dependency>
             <groupId>org.apache.commons</groupId>
@@ -479,7 +479,7 @@
         <dependency>
             <groupId>com.microsoft.sqlserver</groupId>
             <artifactId>mssql-jdbc</artifactId>
-            <version>9.4.1.jre11</version>
+            <version>10.2.4.jre11</version>
         </dependency>
         <dependency> <!-- OF-2960: Including dependencies of ojdbc11-production rather than ojdbc11-production itself. -->
             <groupId>com.oracle.database.jdbc</groupId>