diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index 86800a82553..8c5251f0cff 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -82,7 +82,7 @@
     <embedded-ldap.version>0.9.0</embedded-ldap.version>
     <error-prone-annotations.version>2.38.0</error-prone-annotations.version>
     <felix.version>7.0.5</felix.version>
-    <groovy.version>4.0.27</groovy.version>
+    <groovy.version>5.0.7</groovy.version>
     <guava.version>33.4.8-jre</guava.version>
     <h2.version>2.2.224</h2.version>
     <hamcrest.version>3.0</hamcrest.version>
diff --git a/src/changelog/.2.x.x/update_org.apache.groovy_groovy-bom.xml b/src/changelog/.2.x.x/update_org.apache.groovy_groovy-bom.xml
new file mode 100644
index 00000000000..1720fa08f31
--- /dev/null
+++ b/src/changelog/.2.x.x/update_org.apache.groovy_groovy-bom.xml
@@ -0,0 +1,8 @@
+<?xml version="1.0" encoding="UTF-8"?>
+<entry xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance"
+       xmlns="https://logging.apache.org/xml/ns"
+       xsi:schemaLocation="https://logging.apache.org/xml/ns https://logging.apache.org/xml/ns/log4j-changelog-0.xsd"
+       type="updated">
+  <issue id="4208" link="https://github.com/apache/logging-log4j2/pull/4208"/>
+  <description format="asciidoc">Update `org.apache.groovy:groovy-bom` to version `5.0.7`</description>
+</entry>