Update `org.codehaus.groovy:groovy-bom` to version `3.0.20` (#2125)
diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index 705f3bb..7352884 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -86,7 +86,7 @@
     <flapdoodle-embed.version>4.9.0</flapdoodle-embed.version>
     <flapdoodle-reverse.version>1.7.2</flapdoodle-reverse.version>
     <flume.version>1.11.0</flume.version>
-    <groovy.version>3.0.19</groovy.version>
+    <groovy.version>3.0.20</groovy.version>
     <guava.version>33.0.0-jre</guava.version>
     <h2.version>2.2.224</h2.version>
     <hadoop.version>1.2.1</hadoop.version>
diff --git a/src/changelog/.2.x.x/update_org_codehaus_groovy_groovy_bom.xml b/src/changelog/.2.x.x/update_org_codehaus_groovy_groovy_bom.xml
new file mode 100644
index 0000000..0acd64f
--- /dev/null
+++ b/src/changelog/.2.x.x/update_org_codehaus_groovy_groovy_bom.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="http://logging.apache.org/log4j/changelog"
+       xsi:schemaLocation="http://logging.apache.org/log4j/changelog https://logging.apache.org/log4j/changelog-0.1.3.xsd"
+       type="updated">
+  <issue id="2125" link="https://github.com/apache/logging-log4j2/pull/2125"/>
+  <description format="asciidoc">Update `org.codehaus.groovy:groovy-bom` to version `3.0.20`</description>
+</entry>
diff --git a/src/site/_release-notes/_2.x.x.adoc b/src/site/_release-notes/_2.x.x.adoc
index c0876de..d5c6217 100644
--- a/src/site/_release-notes/_2.x.x.adoc
+++ b/src/site/_release-notes/_2.x.x.adoc
@@ -37,3 +37,8 @@
 === Deprecated
 
 * Deprecated the `RingBufferLogEventHandler` class for removal from the public API in 3.x.
+
+[#release-notes-2-x-x-updated]
+=== Updated
+
+* Update `org.codehaus.groovy:groovy-bom` to version `3.0.20` (https://github.com/apache/logging-log4j2/pull/2125[2125])