Update org.ow2.asm:asm-bom to version 9.6 (#1898)

log4j-parent/pom.xml

@@ -157,7 +157,7 @@
  the independence of transitive dependencies from the order
  of dependencies (requireUpperBoundDeps rule).
  ===================================================== -->
- <asm.version>9.5</asm.version>
+ <asm.version>9.6</asm.version>
  <byte-buddy.version>1.14.9</byte-buddy.version>
  <commons-httpclient.version>3.1</commons-httpclient.version>
  <commons-pool2.version>2.11.1</commons-pool2.version>

src/changelog/.2.x.x/update_org_ow2_asm_asm_bom.xml

@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+ xmlns="http://logging.apache.org/log4j/changelog"
+ xsi:schemaLocation="http://logging.apache.org/log4j/changelog https://logging.apache.org/log4j/changelog-0.1.2.xsd"
+ type="changed">
+ <issue id="1898" link="https:/apache/logging-log4j2/pull/1898"/>
+ <description format="asciidoc">Update `org.ow2.asm:asm-bom` to version `9.6`</description>
+</entry>

src/site/_release-notes/_2.x.x.adoc

@@ -56,6 +56,7 @@ The module name of four bridges (`log4j-slf4j-impl`, `log4j-slf4j2-impl`, `log4j
 * Update `io.netty:netty-bom` to version `4.1.100.Final` (https:/apache/logging-log4j2/pull/1857[1857])
 * Update `net.bytebuddy:byte-buddy` to version `1.14.9` (https:/apache/logging-log4j2/pull/1891[1891])
 * Update `org.mongodb:bson` to version `4.11.0` (https:/apache/logging-log4j2/pull/1893[1893])
+* Update `org.ow2.asm:asm-bom` to version `9.6` (https:/apache/logging-log4j2/pull/1898[1898])
 * Update `org.springframework.boot:spring-boot` to version `2.7.17` (https:/apache/logging-log4j2/pull/1874[1874])
 * Update `org.zeromq:jeromq` to version `0.5.4` (https:/apache/logging-log4j2/pull/1878[1878])
 * Update `ossf/scorecard-action` to version `2.3.1` (https:/apache/logging-log4j2/pull/1897[1897])