Bump log4j2 from 2.21.0 to 2.25.1

Signed-off-by: Andrey Pleskach <ples@aiven.io>

Author: willyborankin

CHANGELOG.md

@@ -65,6 +65,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/),
 - Bump `org.jsoup:jsoup` from 1.20.1 to 1.21.2 ([#19207](https://github.com/opensearch-project/OpenSearch/pull/19207))
 - Bump `org.apache.hadoop:hadoop-minicluster` from 3.4.1 to 3.4.2 ([#19203](https://github.com/opensearch-project/OpenSearch/pull/19203))
 - Bump `com.maxmind.geoip2:geoip2` from 4.3.1 to 4.4.0 ([#19205](https://github.com/opensearch-project/OpenSearch/pull/19205))
+- Bump `log4j2` from 2.21.0 to 2.25.1 ([#19184](https://github.com/opensearch-project/OpenSearch/pull/19184))
 
 ### Deprecated
 

gradle/libs.versions.toml

@@ -13,7 +13,8 @@ jackson_databind  = "2.18.2"
 snakeyaml         = "2.1"
 icu4j             = "77.1"
 supercsv          = "2.4.0"
-log4j             = "2.21.0"
+log4j             = "2.25.1"
+errorprone_anntations = "2.41.0"
 slf4j             = "2.0.17"
 asm               = "9.7"
 jettison          = "1.5.4"

libs/core/licenses/log4j-api-2.21.0.jar.sha1

@@ -0,0 +1 @@
+c7acbbd6f110cd1457c628da46245e355b1ee57a

libs/core/licenses/log4j-api-2.25.1.jar.sha1

@@ -23,8 +23,11 @@ testClusters {
 dependencies {
   compileOnly "com.google.code.findbugs:jsr305:3.0.2"
   runtimeOnly "com.google.guava:guava:${versions.guava}"
-  implementation "com.google.errorprone:error_prone_annotations:2.24.1"
-  implementation "com.google.guava:failureaccess:1.0.2"
+
+  compileOnly "com.github.spotbugs:spotbugs-annotations:4.9.4"
+  compileOnly "com.google.errorprone:error_prone_annotations:${versions.errorprone_anntations}"
+  compileOnly "com.google.guava:failureaccess:1.0.2"
+
   implementation "io.grpc:grpc-api:${versions.grpc}"
   implementation "io.grpc:grpc-core:${versions.grpc}"
   implementation "io.grpc:grpc-netty-shaded:${versions.grpc}"

modules/transport-grpc/build.gradle

@@ -54,7 +54,8 @@ dependencies {
   runtimeOnly "io.grpc:grpc-core:${versions.grpc}"
   implementation "io.grpc:grpc-stub:${versions.grpc}"
   implementation "io.grpc:grpc-netty:${versions.grpc}"
-  implementation "com.google.errorprone:error_prone_annotations:2.31.0"
+
+  compileOnly "com.google.errorprone:error_prone_annotations:${versions.errorprone_anntations}"
 
   runtimeOnly group: 'com.google.code.findbugs', name: 'jsr305', version: '3.0.2'
   annotationProcessor 'org.immutables:value:2.10.1'