Bump log4net from 2.0.12 to 3.2.0 #1

dependabot · 2025-10-31T19:10:51Z

Updated log4net from 2.0.12 to 3.2.0.

Release notes

Sourced from log4net's releases.

3.2.0 What's New

#255 Asynchronous Sending for RemoteSyslogAppender in log4net (implemented in #253 by @yogitasingh001)

What's Changed

#246 fix InvalidCastException in ThreadContextStack.InternalStack.set by @FreeAndNil
Fix caching of time strings in AbsoluteTimeDateFormatter by @FreeAndNil in #248
Fix #244 by @gdziadkiewicz in #251
Shutdown: Unsubscribe from AppDomain event handlers by @Flohack74 in #256
Fixing #250, #260 and adding tests for regression in file rolling by @gdziadkiewicz in #257
#250 mocked DateTimeStrategy to speedup test by @FreeAndNil in #262
change dockerfile from mono:latest to ubuntu:20.04 and install mono manually in c3f92ba

New Contributors

@yogitasingh001 made their first contribution in #253
@Flohack74 made their first contribution in #256

Full Changelog: apache/logging-log4net@rel/3.1.0...rel/3.2.0
Nuget: https://www.nuget.org/packages/log4net/3.2.0

3.2.0-preview.1

What's New

#255 Asynchronous Sending for RemoteSyslogAppender in log4net (implemented in #253 by @yogitasingh001)

What's Changed

#246 fix InvalidCastException in ThreadContextStack.InternalStack.set by @FreeAndNil
Fix caching of time strings in AbsoluteTimeDateFormatter by @FreeAndNil in #248
Fix #244 by @gdziadkiewicz in #251
Shutdown: Unsubscribe from AppDomain event handlers by @Flohack74 in #256
Fixing #250, #260 and adding tests for regression in file rolling by @gdziadkiewicz in #257
#250 mocked DateTimeStrategy to speedup test by @FreeAndNil in #262

New Contributors

@yogitasingh001 made their first contribution in #253
@Flohack74 made their first contribution in #256

Full Changelog: apache/logging-log4net@rel/3.1.0...rc/3.2.0-preview.1
Nuget: https://www.nuget.org/packages/log4net/3.2.0-preview.1

3.1.0 Added

Migrate log4net site to Antora and use logging-parent pom by @FreeAndNil in #210 and #238
Add "Sponsor" buttons to repository by @ppkarwasz in #235
#239 detect Android and use environment variables instead of AppSettings by @FreeAndNil in #240
#239 added MAUI example by @FreeAndNil in #241

Fixed

Handle logs with positive CountDirection, extension preservation and placed in dir by @gdziadkiewicz in #232

New Contributors

@ppkarwasz made their first contribution in Add "Sponsor" buttons to repository apache/logging-log4net#235

Full Changelog: apache/logging-log4net@rel/3.0.4...rel/3.1.0
Nuget: https://www.nuget.org/packages/log4net/3.1.0

3.0.5-preview.2

What's Changed

Handle logs with positive CountDirection, extension preservation and placed in dir #232 by @gdziadkiewicz (fixes #231)

Full Changelog: apache/logging-log4net@rel/3.0.4...rc/3.0.5-preview.2
Nuget: https://www.nuget.org/packages/log4net/3.0.5-preview.2

3.0.5-preview.1

What's Changed

make RollingFileAppender.RollFile virtual by @FreeAndNil in #237 (fixes #234 by @lraulea)

Full Changelog: apache/logging-log4net@rel/3.0.4...rc/3.0.5-preview.1
Nuget: https://www.nuget.org/packages/log4net/3.0.5-preview.1

3.0.4 What's Changed

Turn on the CI build for PRs by @gdziadkiewicz in #204
Keep old, working ubuntu image version. by @gdziadkiewicz in #215
fixed SetQWForFiles method name in FileAppender from #196 by @sketchturner in #217 (fixes #216 reported by @sketchturner)
fix regression from 3.0.0 (log4j:data instead of log4j:throwable) by @FreeAndNil in #226
Show config file path in error message by @FreeAndNil in #228 (resolves #227 by @FrankNuessle)

New Contributors

@sketchturner made his first contribution in #217
@FrankNuessle created his first issue in #227

Full Changelog: apache/logging-log4net@rel/3.0.3...rel/3.0.4
Nuget: https://www.nuget.org/packages/log4net/3.0.4

3.0.4-preview.1

What's Changed

Turn on the CI build for PRs by @gdziadkiewicz in #204
Keep old, working ubuntu image version. by @gdziadkiewicz in #215
fixed SetQWForFiles method name in FileAppender from #196 by @sketchturner in #217 (fixes #216 reported by @sketchturner)
fix regression from 3.0.0 (log4j:data instead of log4j:throwable) by @FreeAndNil in #226

New Contributors

@sketchturner made their first contribution in #217

Full Changelog: apache/logging-log4net@rel/3.0.3...rc/3.0.4-preview.1
Nuget: https://www.nuget.org/packages/log4net/3.0.4-preview.1

3.0.3 What's Changed

Bumped NUnit to 4.2.2 by @FreeAndNil in #200
Enable Microsoft.CodeAnalysis.NetAnalyzers by @FreeAndNil in #201
File scoped namespaces and CA warnings fixed in examples by @FreeAndNil in #202
Fix empty string received by .NET 8 users on Linux on userName by @gdziadkiewicz in #199
Use raw strings for config files in unit tests by @FreeAndNil in #203
Made RollOverRenameFiles virtual to allow compression etc. in derived classes by @FreeAndNil in #206 (solves #205 reported by @FerdinandStapenhorst)
MDC was accidentally renamed into Mdc in #196 - this change was reverted
NDC was accidentally renamed into Ndc in #196 - this change was reverted

New Contributors

@gdziadkiewicz made their first contribution in #199

Full Changelog: apache/logging-log4net@rel/3.0.2...rel/3.0.3
Nuget: https://www.nuget.org/packages/log4net/3.0.3

3.0.3-preview.1

What's Changed

bumped NUnit to 4.2.2 by @FreeAndNil in #200
Enable Microsoft.CodeAnalysis.NetAnalyzers by @FreeAndNil in #201
MDC was accidentally renamed into Mdc in #196 - this change was reverted
NDC was accidentally renamed into Ndc in #196 - this change was reverted

Full Changelog: apache/logging-log4net@rel/3.0.2...rc/3.0.3-preview.1
Nuget: https://www.nuget.org/packages/log4net/3.0.3-preview.1

3.0.2 What's Changed

#189 separate review instructions for log4net by @FreeAndNil in #190
#194 (reported by @VianneyTremelo) fixed a bug in the Dispose-Logic of TelnetAppender by @FreeAndNil in #195
more modern coding style by @FreeAndNil in #196
#197 fix IndexOutOfRangeException when creating child loggers multithreaded by @FreeAndNil in #198

Known Issues

MDC was accidentally renamed into Mdc in #196 - this will be reverted in 3.0.3
NDC was accidentally renamed into Ndc in #196 - this will be reverted in 3.0.3

Full Changelog: apache/logging-log4net@rel/3.0.1...rel/3.0.2
Nuget: https://www.nuget.org/packages/log4net/3.0.2

3.0.2-preview.1

What's Changed

#189 separate review instructions for log4net by @FreeAndNil in #190
#194 ObjectDisposedException in TelnetAppender (3.0.1) (reported by @VianneyTremelo) - fixed by @FreeAndNil in #195

Full Changelog: apache/logging-log4net@rel/3.0.1...rc/3.0.2-preview.1
Nuget: https://www.nuget.org/packages/log4net/3.0.2-preview.1

3.0.1 What's Changed

#176 added source link by @FreeAndNil
#177 use ManagedThreadId for long running tasks (reported by @Audela-220) fixed in #180 by @FreeAndNil
#181 automate version bumps by @FreeAndNil
#183 Unable to set property [file] on object [log4net.Appender.FileAppender] (reported by @sc-mk and @geirg71) fixed in #184 by @FreeAndNil

Full Changelog: apache/logging-log4net@rel/3.0.0...rel/3.0.1
Nuget: https://www.nuget.org/packages/log4net/3.0.1

3.0.1-preview.2

What's Changed

#183 Unable to set property [file] on object [log4net.Appender.FileAppender] (reported by @sc-mk and @geirg71) fixed in #184 by @FreeAndNil

Full Changelog: apache/logging-log4net@rc/3.0.1-preview.1...rc/3.0.1-preview.2
Nuget: https://www.nuget.org/packages/log4net/3.0.1-preview.2

3.0.1-preview.1

What's Changed

#176 added source link by @FreeAndNil
#177 use ManagedThreadId for long running tasks (reported by @Audela-220) fixed in #180 by @FreeAndNil
#181 automate version bumps by @FreeAndNil

Full Changelog: apache/logging-log4net@rel/3.0.0...rc/3.0.1-preview.1
Nuget: https://www.nuget.org/packages/log4net/3.0.1-preview.1

3.0.0

Apache log4net 3.0.0 addresses the following issues:

Breaking Changes

Framework Support

Attention: Starting with 3.0.0 we only support the following target frameworks

net462
netstandard2.0

The reasoning for this change can be found in #111

Deleted obsolete API (#125)

obsolete since 1.2.14 - 2015
- log4net.Appender.BufferingAppenderSkeleton.OnlyFixPartialEventData and log4net.Appender.MemoryAppender.OnlyFixPartialEventData (you will need to change your config files from onlyFixPartialEventData value="true" to fix value="Partial")
- log4net.Appender.ColoredConsoleAppender.ctor(ILayout)
- log4net.Appender.ColoredConsoleAppender.ctor(ILayout, bool)
- log4net.Appender.ConsoleAppender.ctor(ILayout)
- log4net.Appender.ConsoleAppender.ctor(ILayout, bool)
- log4net.Appender.DebugAppender.ctor(ILayout)
- log4net.Appender.EventLogAppender.ctor(ILayout)
- log4net.Appender.FileAppender.ctor(ILayout, string)
- log4net.Appender.FileAppender.ctor(ILayout, string, bool)
- log4net.Appender.SmtpAppender.LocationInfo
- log4net.Appender.TextWriterAppender.ctor(ILayout, Stream)
- log4net.Appender.TextWriterAppender.ctor(ILayout, TextWriter)
- log4net.Appender.TraceAppender.ctor(ILayout)
- log4net.Config.DOMConfigurator
- log4net.Config.AliasDomainAttribute
- log4net.Config.DomainAttribute
- log4net.Config.DOMConfiguratorAttribute
- log4net.Core.LoggerManager.GetLoggerRepository
- log4net.Core.LoggerManager.CreateDomain
- log4net.Core.LoggingEventData.TimeStamp
- log4net.Core.LoggingEvent.GetExceptionStrRep
- log4net.Core.LoggingEvent.FixVolatileData
- log4net.LogManager.GetLoggerRepository
- log4net.LogManager.CreateDomain
obsolete since 2.0.6 - 2016
- log4net.Util.SystemInfo.ProcessStartTime

Other changes

dropped log4net.Appender.RemotingAppender (see #154 - Remove RemotingAppender)
dropped log4net.Appender.NetSendAppender (see #158 - NetSendAppender removed)
dropped support for legacy serialization for .netstandard (see #174 and #175)
log4net.Config.AliasRepositoryAttribute is now sealed (#124)
log4net.Config.RepositoryAttribute is now sealed (#124)
log4net.Config.XmlConfiguratorAttribute is now sealed (#124)
interface log4net.Appender.AppenderCollection.IAppenderCollectionEnumerator is now obsolete and must be replaced by IEnumerator<IAppender> (#124)
log4net.Appender.MemoryAppender.m_eventsList (protected field) was changed from ArrayList to List<LoggingEvent> (#124)
- for getting m_eventsList.SyncRoot you need to cast it: ((ICollection)m_eventsList).SyncRoot
  ... (truncated)

3.0.0-preview.4

Apache log4net 3.0.0-preview.4 is probably the last preview of log4net 3.0.0 and addresses the following issues:

What's Changed

dropped support for legacy serialization for .netstandard (see #174 and #175)

Full Changelog: apache/logging-log4net@rc/3.0.0-preview.3...rc/3.0.0-preview.4
Nuget: https://www.nuget.org/packages/log4net/3.0.0-preview.4

3.0.0-preview.3

Apache log4net 3.0.0-preview.3 is the third preview of log4net 3.0.0 and addresses the following issues:

What's Changed

#109 fixed 'Fix dotnet (ie not netfx) test run' by @mobilebilly in Fix dotnet test Command Not Recognizing NUnit3TestAdapter apache/logging-log4net#164
#169 fixed NullReferenceException when comparing with a null Level by @FreeAndNil in #169 fixed NullReferenceException when comparing with a null Level apache/logging-log4net#170
#168 wrap encoding in ColoredConsoleAppender for skipping preamble by @FreeAndNil in #168 wrap encoding in ColoredConsoleAppender for skipping preamble apache/logging-log4net#172

New Contributors

@mobilebilly made their first contribution in Fix dotnet test Command Not Recognizing NUnit3TestAdapter apache/logging-log4net#164

Full Changelog: apache/logging-log4net@rc/3.0.0-preview.2...rc/3.0.0-preview.3
Nuget: https://www.nuget.org/packages/log4net/3.0.0-preview.3

3.0.0-preview.2

Apache log4net 3.0.0-preview.2 is the second preview of log4net 3.0.0 and addresses the following issues:

Breaking Changes

Deleted obsolete API

log4net.Appender.RemotingAppender (see #154 - Remove RemotingAppender)
log4net.Appender.NetSendAppender (see #158 - NetSendAppender removed)

Other changes (#157)

log4net.Repository.Hierarchy.Hierarchy.EmittedNoAppenderWarning is now internal (see #157)

Bugs

Regression: Creating nested loggers in reverse order fails in 3.0.0-preview.1 (#156 by @FreeAndNil)
Complete diff
Nuget

3.0.0-preview.1

Apache log4net 3.0.0-preview.1 is the first preview of log4net 3.0.0 and addresses the following issues:

Breaking Changes

Framework Support

Attention: Starting with 3.0.0 we only support the following target frameworks

net462
netstandard2.0

The reasoning for this change can be found in #111 - Dropping support for older runtimes

Deleted obsolete API (#125 - Remove deprecated code for 3.0)

obsolete since 1.2.14 - 2015
- log4net.Appender.BufferingAppenderSkeleton.OnlyFixPartialEventData
- log4net.Appender.ColoredConsoleAppender.ctor(ILayout)
- log4net.Appender.ColoredConsoleAppender.ctor(ILayout, bool)
- log4net.Appender.ConsoleAppender.ctor(ILayout)
- log4net.Appender.ConsoleAppender.ctor(ILayout, bool)
- log4net.Appender.DebugAppender.ctor(ILayout)
- log4net.Appender.EventLogAppender.ctor(ILayout)
- log4net.Appender.FileAppender.ctor(ILayout, string)
- log4net.Appender.FileAppender.ctor(ILayout, string, bool)
- log4net.Appender.MemoryAppender.OnlyFixPartialEventData
- log4net.Appender.SmtpAppender.LocationInfo
- log4net.Appender.TextWriterAppender.ctor(ILayout, Stream)
- log4net.Appender.TextWriterAppender.ctor(ILayout, TextWriter)
- log4net.Appender.TraceAppender.ctor(ILayout)
- log4net.Config.DOMConfigurator
- log4net.Config.AliasDomainAttribute
- log4net.Config.DomainAttribute
- log4net.Config.DOMConfiguratorAttribute
- log4net.Core.LoggerManager.GetLoggerRepository
- log4net.Core.LoggerManager.CreateDomain
- log4net.Core.LoggingEventData.TimeStamp
- log4net.Core.LoggingEvent.GetExceptionStrRep
- log4net.Core.LoggingEvent.FixVolatileData
- log4net.LogManager.GetLoggerRepository
- log4net.LogManager.CreateDomain
obsolete since 2.0.6 - 2016
- log4net.Util.SystemInfo.ProcessStartTime

Other changes (#124 - Add support for nullable annotations)

log4net.Config.AliasRepositoryAttribute is now sealed
log4net.Config.RepositoryAttribute is now sealed
log4net.Config.XmlConfiguratorAttribute is now sealed
interface log4net.Appender.AppenderCollection.IAppenderCollectionEnumerator is now obsolete and must be replaced by IEnumerator<IAppender>
log4net.Appender.MemoryAppender.m_eventsList (protected field) was changed from ArrayList to List<LoggingEvent>
- for getting m_eventsList.SyncRoot you need to cast it: ((ICollection)m_eventsList).SyncRoot

Enhancements

#111 - Dropping support for older runtimes (by @fluffynuts and @freeandnil)
... (truncated)

2.0.17

Apache log4net 2.0.17 addresses reported issues:

Bug fixes

NullRefException from shutdown in 2.0.16 fixed in Fast fix for NullRefException from FileAppender" (by @erikmav)"

Complete diff

2.0.16

A big thanks to @FreeAndNil for doing all the hard work of collating changes.

Bug fixes

Support converting '.NET TP Worker' to the numeric thread ID on .NET 8+ (by @erikmav)
Fix typo in RemotingServer App.Config (by @craigdfrench)
Fix CodeQL Password in configuration file Rule False Positives (by @justinmichaels)

Enhancements

adding extension points for revising logged content (by @freeandnil)
SystemInfo.EntryAssemblyLocation writable to adjust location for config-files in unit test projects (by @freeandnil)
New locking model for single log file in native applications with managed parts (by @freeandnil)
Extension point for handling new lines in RemoteSysLogAppender added (by @freeandnil)
Defer creation of locking model to ActivateOptions() (by @freeandnil)
Add Peek() method to ThreadContextStack and LogicalThreadContextStack (by @andreycha)

2.0.15

Attention: .NET 3.5 Client Profile is no longer supported. I'm really sorry, I've tried to keep as many of the legacy targets available as possible, but after spending another 4 or so hours trying to get net35-client to build on any machine, I've given up - as far as I'm aware, this should only affect Windows XP clients. I'm afraid 2.0.14 was the end of the road for you. Apache log4net 2.0.15 addresses reported issues:

Bug fixes

Improper usage of xml namespacing for netfx targets after a netstandard update ( LOG4NET-685, related LOG4NET-683)
Locking hashtables during write in RenderMap calls to make them thread-safe ( LOG4NET-646)
An issue where RollingFilAppender would sometimes overwrite files instead of rolling them ( LOG4NET-672)

Enhancements

2.0.14

Pull request by @NicholasNoise to address issues with logging via ado appender to PostgreSQL
Community request to correctly handle null data in ReadOnlyPropertiesDictionary
Pull request by @erikmav to use the numeric thread id for .net worker pool threads (LOG4NET-680)
Pull request by @erikmav to dispose of WindowsIdentity retrieved in TryGetCurrentUserName() (LOG4NET-671)

2.0.13

Some minor updates:

address deadlock with rolling file appender (https://issues.apache.org/jira/browse/LOG4NET-583)
performance improvement for platforms not supporting WindowsIdentity (https://issues.apache.org/jira/browse/LOG4NET-652)
allow using the netstandard2.0 libraries from within asp.net on net472 (#76)
update to the log4j-alike output (#18)

This is essentially the same release as rc-1, with the artifacts updated so that unzipping them won't scatter files in the target.

Commits viewable in compare view.

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

--- updated-dependencies: - dependency-name: log4net dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>

github-actions · 2025-10-31T19:13:09Z

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package

Version

Score

Details

nuget/log4net

3.2.0

🟢 5.4

Details

Check	Score	Reason
Code-Review	⚠️ 2	Found 6/26 approved changesets -- score normalized to 2
Dangerous-Workflow	🟢 10	no dangerous workflow patterns detected
Packaging	⚠️ -1	packaging workflow not detected
Maintained	🟢 10	18 commit(s) and 0 issue activity found in the last 90 days -- score normalized to 10
Token-Permissions	⚠️ 0	detected GitHub workflow tokens with excessive permissions
CII-Best-Practices	⚠️ 0	no effort to earn an OpenSSF best practices badge detected
Binary-Artifacts	🟢 9	binaries present in source code
Fuzzing	⚠️ 0	project is not fuzzed
License	🟢 10	license file detected
Branch-Protection	⚠️ 0	branch protection not enabled on development/release branches
Signed-Releases	🟢 8	5 out of the last 5 releases have a total of 5 signed artifacts.
Security-Policy	🟢 10	security policy file detected
Pinned-Dependencies	⚠️ 2	dependency not pinned by hash detected -- score normalized to 2
Vulnerabilities	🟢 9	1 existing vulnerabilities detected
SAST	⚠️ 0	SAST tool is not run on all commits -- score normalized to 0

Scanned Files

VulnerableConsole/VulnerableConsole.csproj

Bump log4net from 2.0.12 to 3.2.0

f1c9af3

--- updated-dependencies: - dependency-name: log4net dependency-version: 3.2.0 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] <[email protected]>

dependabot bot added dependencies Pull requests that update a dependency file .NET Pull requests that update .NET code labels Oct 31, 2025

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

Bump log4net from 2.0.12 to 3.2.0 #1

Bump log4net from 2.0.12 to 3.2.0 #1

Uh oh!

dependabot bot commented on behalf of github Oct 31, 2025

Uh oh!

github-actions bot commented Oct 31, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Bump log4net from 2.0.12 to 3.2.0 #1

Are you sure you want to change the base?

Bump log4net from 2.0.12 to 3.2.0 #1

Uh oh!

Conversation

dependabot bot commented on behalf of github Oct 31, 2025

3.2.0

What's New

What's Changed

New Contributors

3.2.0-preview.1

What's New

What's Changed

New Contributors

3.1.0

Added

Fixed

New Contributors

3.0.5-preview.2

What's Changed

3.0.5-preview.1

What's Changed

3.0.4

What's Changed

New Contributors

3.0.4-preview.1

What's Changed

New Contributors

3.0.3

What's Changed

New Contributors

3.0.3-preview.1

What's Changed

3.0.2

What's Changed

Known Issues

3.0.2-preview.1

What's Changed

3.0.1

What's Changed

3.0.1-preview.2

What's Changed

3.0.1-preview.1

What's Changed

3.0.0

Breaking Changes

Framework Support

Deleted obsolete API (#​125)

Other changes

3.0.0-preview.4

What's Changed

3.0.0-preview.3

What's Changed

New Contributors

3.0.0-preview.2

Breaking Changes

Deleted obsolete API

Other changes (#​157)

Bugs

3.0.0-preview.1

Breaking Changes

Framework Support

Deleted obsolete API (#​125 - Remove deprecated code for 3.0)

Other changes (#​124 - Add support for nullable annotations)

Enhancements

2.0.17

Bug fixes

2.0.16

2.0.15

Bug fixes

Enhancements

2.0.14

2.0.13

Uh oh!

github-actions bot commented Oct 31, 2025

Dependency Review

OpenSSF Scorecard

Scanned Files

Uh oh!

Reviewers

Deleted obsolete API (#125)

Other changes (#157)

Deleted obsolete API (#125 - Remove deprecated code for 3.0)

Other changes (#124 - Add support for nullable annotations)