Add log4j dependies for creating log files (#456)

Co-authored-by: TW_Renyong Wang <renyong.wang@thoughtworks.com>
azagniotov · Aug 4, 2022 · d34258c · d34258c
1 parent a7043dc
commit d34258c
Showing 1 changed file with 2 additions and 18 deletions.
diff --git a/conf/gradle/dependencies.gradle b/conf/gradle/dependencies.gradle
@@ -27,24 +27,8 @@ dependencies {
         var becauseMsg = "CVE-2021-44228, CVE-2021-45046, CVE-2021-45105, CVE-2021-44832: Log4j vulnerable to remote code execution and other critical security vulnerabilities"
         println "> Building with log4j included in default dependencies"
         api "org.apache.logging.log4j:log4j-slf4j-impl:${log4j2Version}"
-
-        constraints {
-            api("org.apache.logging.log4j:log4j-api") {
-                version {
-                    strictly("${log4j2Version}")
-                    prefer("2.17.1")
-                }
-                because(becauseMsg)
-            }
-
-            api("org.apache.logging.log4j:log4j-core") {
-                version {
-                    strictly("${log4j2Version}")
-                    prefer("2.17.1")
-                }
-                because(becauseMsg)
-            }
-        }
+        api "org.apache.logging.log4j:log4j-api:${log4j2Version}"
+        api "org.apache.logging.log4j:log4j-core:${log4j2Version}"
 
     } else {
         println "> Building with default dependencies"