From 2912335eabca8664cd78700c9c3fd0e036b9b430 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 19 Dec 2025 22:49:28 +0000
Subject: [PATCH 1/2] Bump org.apache.logging.log4j:log4j-core from 2.17.1 to
 2.25.3

Bumps org.apache.logging.log4j:log4j-core from 2.17.1 to 2.25.3.

---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-core
  dependency-version: 2.25.3
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index e82c3b9..028ed07 100644
--- a/pom.xml
+++ b/pom.xml
@@ -16,7 +16,7 @@
 		<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
 		<java.version>11</java.version>
 		<junit.version>5.8.2</junit.version>
-		<log4j.version>2.17.1</log4j.version>
+		<log4j.version>2.25.3</log4j.version>
 		<orchestra.version>1.7.3</orchestra.version>
 		<saxon.version>10.6</saxon.version>
 		<ignoreSigningInformation>true</ignoreSigningInformation>

From 2502e365cc7f264b2331c6e9b30409e113e2a599 Mon Sep 17 00:00:00 2001
From: Hanno Klein <hanno.klein@fixtrading.org>
Date: Tue, 23 Dec 2025 18:35:36 +0100
Subject: [PATCH 2/2] Update maven.yml

---
 .github/workflows/maven.yml | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/.github/workflows/maven.yml b/.github/workflows/maven.yml
index eb99442..ea63cea 100644
--- a/.github/workflows/maven.yml
+++ b/.github/workflows/maven.yml
@@ -15,9 +15,9 @@ jobs:
     runs-on: ubuntu-latest
 
     steps:
-    - uses: actions/checkout@v2
+    - uses: actions/checkout@v3
     - name: Set up JDK 11
-      uses: actions/setup-java@v1
+      uses: actions/setup-java@v3
       with:
         java-version: 11
     - name: Build with Maven