Chore(deps): Bump com.sap.hcp.cf.logging:cf-java-logging-support-log4j2 from 3.8.6 to 4.0.0 in /jpa

[dependabot]

Bumps com.sap.hcp.cf.logging:cf-java-logging-support-log4j2 from 3.8.6 to 4.0.0.

Release notes

Sourced from com.sap.hcp.cf.logging:cf-java-logging-support-log4j2's releases.

4.0.0

Welcome to the new major release

This release introduces major changes to cf-java-logging-support. The library now requires Java 17.x+ and SLF4J 2.x+. If you need support for older versions (including javax.servlet) please stay on the 3.x release.

Noticable changes

If you upgrade from an earlier release of this library, you should be able to keep your current configuration. But you might need to change your dependencies to accommodate for the renaming of cf-java-logging-support-servlet-jakarta to cf-java-logging-support-servlet. This is likely to be the only breaking change.

Upgrades

• Java 17 is required (except for OpenTelemetry Java Agent extension which need Java 11)
• Jakarta Servlet API only
• SLF4j 2.x and corresponding versions of Logback and Log4j2

Removals

• cf-java-logging-support-servlet-jakarta (moved to cf-java-logging-support-servlet)
• cf-java-logging-support-jersey
• cf-java-monitoring-custom-metrics-clients/*
• sample app using Jersey

Note, that for sending custom metrics it is recommended to use the OpenTelemetry Java Agent with the cf-java-logging-support-opentelemetry-agent-extension.

New Features

• Support for key-value-pairs in SLF4J's fluent API
• SPI extensions points for
  • ContextFieldSupplier, LogbackContextFieldSupplier, and Log4jContextFieldSupplier
  • DynamicLogLevelConfiguration and DynamicLogLevelProcessor
• auto-detection of service bindings to SAP Application Logging service for SAP BTP and formatting of custom fields accordingly

Breaking Changes

The main branch was force-pushed to contain the 4.x version of the library. You may need to reset your local repository, if you checked out the code before the creation of the release candidates.

The dynamic log level feature has been refactored. It now requires cf-java-logging-support-servlet-dynlog-jwt as additional dependency. The original configuration still applies but if you implemented custom extensions you likely need to integrate with the new extension points. Please have a look at the Spring Boot Sample App that includes a custom integration with the dynamic log level feature.

What's Changed

• Draft Release 4: Basic Changes by @​KarstenSchnitter in SAP/cf-java-logging-support#173
• Integration of recent changes on main by @​KarstenSchnitter in SAP/cf-java-logging-support#196
• Fix Mocking in Unit Test by @​KarstenSchnitter in SAP/cf-java-logging-support#197
• Support SPI Loading of ContextFieldSuppliers for Logback by @​KarstenSchnitter in SAP/cf-java-logging-support#198
• Introduce SPI Loading for Log4j ContextFieldSuppliers by @​KarstenSchnitter in SAP/cf-java-logging-support#199
• Support SLF4J Key-Value-Pairs by @​KarstenSchnitter in SAP/cf-java-logging-support#200
• Extract JWT Implementation for Dynamic Log Levels by @​KarstenSchnitter in SAP/cf-java-logging-support#203
• Detect Bindings to SAP Application Logging Service by @​KarstenSchnitter in SAP/cf-java-logging-support#204

Full Changelog: SAP/cf-java-logging-support@v3.8.6...4.0.0

Commits

• 5646daf Add Core Developers
• 586644b Create Final Release 4.0.0
• 060dd36 Adjust Maven Metadata
• 0453eeb Upgrade java-jwt to 4.5.0
• 4733f13 Align Jackson Version using BOM
• 2393080 Align runtime dependencies with Spring Boot 3.5.7
• 8b6138d Update pom.xml
• eb4eccb Simplify List creation (mostly in Test)
• 9042045 Add Enforcer Plugin to Ensure Java 17 Build
• fcc051e Downgrade Jackson
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)