bump: log4j-api, log4j-core, ... 2.24.2 (was 2.24.1) (#1352)

scala-steward · web-flow · commit 3de542f475e8 · 2024-11-29T13:13:23.000+01:00
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -27,7 +27,7 @@ object Dependencies {
   val JacksonVersion = "2.17.2"
   val JacksonDatabindVersion = JacksonVersion
 
-  val Log4j2Version = "2.24.1"
+  val Log4j2Version = "2.24.2"
 
   // often called-in transitively with insecure versions of databind / core
   private val JacksonDatabind = Seq(
