From 9ad7702f9e28abe240a1d61a164d6a7f9d307b57 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 7 Aug 2026 12:48:13 +0000 Subject: [PATCH 1/3] chore(deps): bump log4j2 from 2.20.0 to 2.26.1 Bumps `log4j2` from 2.20.0 to 2.26.1. Updates `org.apache.logging.log4j:log4j-api` from 2.20.0 to 2.26.1 Updates `org.apache.logging.log4j:log4j-core` from 2.20.0 to 2.26.1 --- updated-dependencies: - dependency-name: org.apache.logging.log4j:log4j-api dependency-version: 2.26.0 dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: org.apache.logging.log4j:log4j-core dependency-version: 2.26.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] Co-Authored-By: Nelson Osacky --- gradle/libs.versions.toml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index daedf7629f..b73be80177 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -21,7 +21,7 @@ kotlin-compatible-version = "1.9" ksp = "2.3.9" ktorClient = "3.0.0" logback = "1.2.9" -log4j2 = "2.20.0" +log4j2 = "2.26.1" nopen = "1.0.1" # see https://www.jetbrains.com/help/kotlin-multiplatform-dev/compose-compatibility-and-versioning.html#kotlin-compatibility # see https://developer.android.com/jetpack/androidx/releases/compose-kotlin From a32f4801ff5220d712101a2a17b60916557eeb77 Mon Sep 17 00:00:00 2001 From: "sentry-junior[bot]" <264270552+sentry-junior[bot]@users.noreply.github.com> Date: Mon, 26 Oct 2026 08:50:33 +0000 Subject: [PATCH 2/3] fix(log4j2): Suppress Message.getFormat() deprecation warning log4j 2.24.0 deprecated Message.getFormat() without providing a replacement for reading the message template. Suppress the warning so the log4j2 bump compiles under -Werror. Co-Authored-By: Nelson Osacky --- .../src/main/java/io/sentry/log4j2/SentryAppender.java | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/sentry-log4j2/src/main/java/io/sentry/log4j2/SentryAppender.java b/sentry-log4j2/src/main/java/io/sentry/log4j2/SentryAppender.java index c965784f00..ce8d15e033 100644 --- a/sentry-log4j2/src/main/java/io/sentry/log4j2/SentryAppender.java +++ b/sentry-log4j2/src/main/java/io/sentry/log4j2/SentryAppender.java @@ -242,7 +242,9 @@ public void append(final @NotNull LogEvent eventObject) { * @param loggingEvent the log4j2 event */ // for the Android compatibility we must use old Java Date class - @SuppressWarnings("JdkObsolete") + // Message.getFormat() is deprecated since log4j 2.24.0 without a replacement for reading the + // message template + @SuppressWarnings({"JdkObsolete", "deprecation"}) protected void captureLog(@NotNull LogEvent loggingEvent) { final @NotNull SentryLogLevel sentryLevel = toSentryLogLevel(loggingEvent.getLevel()); @@ -274,7 +276,9 @@ protected void captureLog(@NotNull LogEvent loggingEvent) { * @return the sentry event */ // for the Android compatibility we must use old Java Date class - @SuppressWarnings("JdkObsolete") + // Message.getFormat() is deprecated since log4j 2.24.0 without a replacement for reading the + // message template + @SuppressWarnings({"JdkObsolete", "deprecation"}) protected @NotNull SentryEvent createEvent(final @NotNull LogEvent loggingEvent) { final SentryEvent event = new SentryEvent(DateUtils.getDateTime(loggingEvent.getTimeMillis())); final Message message = new Message(); From c85a392474e76f131aae486cc6968613d04492f0 Mon Sep 17 00:00:00 2001 From: "sentry-junior[bot]" <264270552+sentry-junior[bot]@users.noreply.github.com> Date: Mon, 26 Oct 2026 08:54:00 +0000 Subject: [PATCH 3/3] build(log4j2): Pass GraalVmProcessor options log4j-core 2.24+ ships a GraalVmProcessor that warns when log4j.graalvm.groupId/artifactId are missing, which fails compileJava under -Werror. Co-Authored-By: Nelson Osacky --- sentry-log4j2/build.gradle.kts | 10 ++++++++++ 1 file changed, 10 insertions(+) diff --git a/sentry-log4j2/build.gradle.kts b/sentry-log4j2/build.gradle.kts index 2d2444a239..37bf333e4f 100644 --- a/sentry-log4j2/build.gradle.kts +++ b/sentry-log4j2/build.gradle.kts @@ -55,6 +55,16 @@ tasks.withType().configureEach { } } +// log4j's GraalVmProcessor warns (and fails the build under -Werror) without these options +tasks.named("compileJava") { + options.compilerArgs.addAll( + listOf( + "-Alog4j.graalvm.groupId=${project.group}", + "-Alog4j.graalvm.artifactId=${project.name}", + ) + ) +} + tasks.jar { manifest { attributes(