Upgrade log4j to 2.21.1 . Use log4j-bom (#7900)

helidon-io · Oct 26, 2023 · af4eba9 · af4eba9
1 parent 566cfc4
commit af4eba9
Showing 1 changed file with 8 additions and 21 deletions.
diff --git a/dependencies/pom.xml b/dependencies/pom.xml
@@ -92,7 +92,7 @@
         <version.lib.jgit>6.7.0.202309050840-r</version.lib.jgit>
         <version.lib.junit>5.9.3</version.lib.junit>
         <version.lib.kafka>3.6.0</version.lib.kafka>
-        <version.lib.log4j>2.18.0</version.lib.log4j>
+        <version.lib.log4j>2.21.1</version.lib.log4j>
         <version.lib.logback>1.4.0</version.lib.logback>
         <version.lib.mariadb-java-client>2.6.2</version.lib.mariadb-java-client>
         <version.lib.maven-wagon>2.10</version.lib.maven-wagon>
@@ -744,16 +744,6 @@
                 <artifactId>slf4j-jdk14</artifactId>
                 <version>${version.lib.slf4j}</version>
             </dependency>
-            <dependency>
-                <groupId>org.apache.logging.log4j</groupId>
-                <artifactId>log4j-api</artifactId>
-                <version>${version.lib.log4j}</version>
-            </dependency>
-            <dependency>
-                <groupId>org.apache.logging.log4j</groupId>
-                <artifactId>log4j-jpl</artifactId>
-                <version>${version.lib.log4j}</version>
-            </dependency>
             <dependency>
                 <groupId>io.smallrye</groupId>
                 <artifactId>smallrye-open-api-core</artifactId>
@@ -1110,16 +1100,6 @@
                 <artifactId>jul-to-slf4j</artifactId>
                 <version>${version.lib.slf4j}</version>
             </dependency>
-            <dependency>
-                <groupId>org.apache.logging.log4j</groupId>
-                <artifactId>log4j-core</artifactId>
-                <version>${version.lib.log4j}</version>
-            </dependency>
-            <dependency>
-                <groupId>org.apache.logging.log4j</groupId>
-                <artifactId>log4j-jul</artifactId>
-                <version>${version.lib.log4j}</version>
-            </dependency>
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-classic</artifactId>
@@ -1413,6 +1393,13 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
+            <dependency>
+                <groupId>org.apache.logging.log4j</groupId>
+                <artifactId>log4j-bom</artifactId>
+                <version>${version.lib.log4j}</version>
+                <type>pom</type>
+                <scope>import</scope>
+            </dependency>
         </dependencies>
     </dependencyManagement>
 </project>