From 74b320d9d6fbe8b7f901c39ff2e9a8bc3f153437 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 21 Aug 2026 14:42:37 +0000
Subject: [PATCH] chore(deps): bump the maven group across 10 directories with
 5 updates

Bumps the maven group with 1 update in the /component-runtime-beam directory: [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java).
Bumps the maven group with 1 update in the /component-runtime-testing/component-runtime-http-junit directory: [io.netty:netty-codec-http](https://github.com/netty/netty).
Bumps the maven group with 1 update in the /component-runtime-testing/component-runtime-testing-spark directory: org.apache.logging.log4j:log4j-api.
Bumps the maven group with 1 update in the /component-starter-server directory: [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java).
Bumps the maven group with 1 update in the /component-tools directory: [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java).
Bumps the maven group with 1 update in the /component-tools-webapp directory: [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java).
Bumps the maven group with 3 updates in the /documentation directory: [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java), [org.jsoup:jsoup](https://github.com/jhy/jsoup) and org.apache.cxf:cxf-core.
Bumps the maven group with 1 update in the /reporting directory: [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java).
Bumps the maven group with 1 update in the /talend-component-maven-plugin directory: [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java).
Bumps the maven group with 1 update in the /vault-client directory: [at.yawk.lz4:lz4-java](https://github.com/yawkat/lz4-java).


Updates `at.yawk.lz4:lz4-java` from 1.10.4 to 1.11.1
- [Release notes](https://github.com/yawkat/lz4-java/releases)
- [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md)
- [Commits](https://github.com/yawkat/lz4-java/compare/v1.10.4...v1.11.1)

Updates `io.netty:netty-codec-http` from 4.1.135.Final to 4.1.137.Final
- [Release notes](https://github.com/netty/netty/releases)
- [Commits](https://github.com/netty/netty/compare/netty-4.1.135.Final...netty-4.1.137.Final)

Updates `org.apache.logging.log4j:log4j-api` from 2.17.2 to 2.25.5

Updates `at.yawk.lz4:lz4-java` from 1.10.4 to 1.11.1
- [Release notes](https://github.com/yawkat/lz4-java/releases)
- [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md)
- [Commits](https://github.com/yawkat/lz4-java/compare/v1.10.4...v1.11.1)

Updates `at.yawk.lz4:lz4-java` from 1.10.4 to 1.11.1
- [Release notes](https://github.com/yawkat/lz4-java/releases)
- [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md)
- [Commits](https://github.com/yawkat/lz4-java/compare/v1.10.4...v1.11.1)

Updates `at.yawk.lz4:lz4-java` from 1.10.4 to 1.11.1
- [Release notes](https://github.com/yawkat/lz4-java/releases)
- [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md)
- [Commits](https://github.com/yawkat/lz4-java/compare/v1.10.4...v1.11.1)

Updates `at.yawk.lz4:lz4-java` from 1.10.4 to 1.11.1
- [Release notes](https://github.com/yawkat/lz4-java/releases)
- [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md)
- [Commits](https://github.com/yawkat/lz4-java/compare/v1.10.4...v1.11.1)

Updates `org.jsoup:jsoup` from 1.15.3 to 1.23.1
- [Release notes](https://github.com/jhy/jsoup/releases)
- [Changelog](https://github.com/jhy/jsoup/blob/master/CHANGES.md)
- [Commits](https://github.com/jhy/jsoup/compare/jsoup-1.15.3...jsoup-1.23.1)

Updates `org.apache.cxf:cxf-core` from 3.5.11 to 3.6.12

Updates `at.yawk.lz4:lz4-java` from 1.10.4 to 1.11.1
- [Release notes](https://github.com/yawkat/lz4-java/releases)
- [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md)
- [Commits](https://github.com/yawkat/lz4-java/compare/v1.10.4...v1.11.1)

Updates `at.yawk.lz4:lz4-java` from 1.10.4 to 1.11.1
- [Release notes](https://github.com/yawkat/lz4-java/releases)
- [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md)
- [Commits](https://github.com/yawkat/lz4-java/compare/v1.10.4...v1.11.1)

Updates `at.yawk.lz4:lz4-java` from 1.10.4 to 1.11.1
- [Release notes](https://github.com/yawkat/lz4-java/releases)
- [Changelog](https://github.com/yawkat/lz4-java/blob/main/CHANGES.md)
- [Commits](https://github.com/yawkat/lz4-java/compare/v1.10.4...v1.11.1)

---
updated-dependencies:
- dependency-name: at.yawk.lz4:lz4-java
  dependency-version: 1.11.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: io.netty:netty-codec-http
  dependency-version: 4.1.137.Final
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.logging.log4j:log4j-api
  dependency-version: 2.25.5
  dependency-type: direct:development
  dependency-group: maven
- dependency-name: at.yawk.lz4:lz4-java
  dependency-version: 1.11.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: at.yawk.lz4:lz4-java
  dependency-version: 1.11.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: at.yawk.lz4:lz4-java
  dependency-version: 1.11.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: at.yawk.lz4:lz4-java
  dependency-version: 1.11.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.jsoup:jsoup
  dependency-version: 1.23.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: org.apache.cxf:cxf-core
  dependency-version: 3.6.12
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: at.yawk.lz4:lz4-java
  dependency-version: 1.11.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: at.yawk.lz4:lz4-java
  dependency-version: 1.11.1
  dependency-type: direct:production
  dependency-group: maven
- dependency-name: at.yawk.lz4:lz4-java
  dependency-version: 1.11.1
  dependency-type: direct:production
  dependency-group: maven
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 .../component-runtime-http-junit/pom.xml                      | 2 +-
 .../component-runtime-testing-spark/pom.xml                   | 2 +-
 pom.xml                                                       | 4 ++--
 3 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/component-runtime-testing/component-runtime-http-junit/pom.xml b/component-runtime-testing/component-runtime-http-junit/pom.xml
index 36ea6444b24df..1cc1c81ac88f2 100644
--- a/component-runtime-testing/component-runtime-http-junit/pom.xml
+++ b/component-runtime-testing/component-runtime-http-junit/pom.xml
@@ -28,7 +28,7 @@
   <description>JUnit integration to simplify the HTTP API testing/mocking.</description>
 
   <properties>
-    <netty.version>4.1.135.Final</netty.version>
+    <netty.version>4.1.137.Final</netty.version>
     <talend.build.name>${talend.build.name.base}.junit.http</talend.build.name>
   </properties>
 
diff --git a/component-runtime-testing/component-runtime-testing-spark/pom.xml b/component-runtime-testing/component-runtime-testing-spark/pom.xml
index 83c82e5c9450a..12d575b1bca51 100644
--- a/component-runtime-testing/component-runtime-testing-spark/pom.xml
+++ b/component-runtime-testing/component-runtime-testing-spark/pom.xml
@@ -30,7 +30,7 @@
   <properties>
     <talend.build.name>${talend.build.name.base}.testing.spark</talend.build.name>
     <!-- need to be aligned with the spark version used in the test scope -->
-    <log4j2.version>2.17.2</log4j2.version>
+    <log4j2.version>2.25.5</log4j2.version>
     <!-- 4.0.1 breaks spark -->
     <plexus-utils.version>3.6.1</plexus-utils.version>
   </properties>
diff --git a/pom.xml b/pom.xml
index 194ff527a4ff1..2bc2b46b908ef 100644
--- a/pom.xml
+++ b/pom.xml
@@ -297,7 +297,7 @@
 
     <johnzon.version>1.2.21</johnzon.version>
     <slf4j.version>1.7.34</slf4j.version>
-    <log4j2.version>2.25.5</log4j2.version>
+    <log4j2.version>2.26.1</log4j2.version>
     <rhino.version>1.9.0</rhino.version>
     <tomitribe-crest.version>0.32</tomitribe-crest.version>
     <httpclient.version>4.5.14</httpclient.version>
@@ -913,7 +913,7 @@
       <dependency>
         <groupId>at.yawk.lz4</groupId>
         <artifactId>lz4-java</artifactId>
-        <version>1.10.4</version>
+        <version>1.11.1</version>
       </dependency>
       <dependency>
         <groupId>com.google.protobuf</groupId>