I think logging arguments would be a security violation in many applications. Perhaps we can make this an option (default false)?

I just copied whatever jdkLogHandler does.
https://github.com/tpolecat/doobie/blob/main/modules/free/src/main/scala/doobie/util/log.scala#L66

jdkLogHandler is not for production use (as written in the scaladoc). Although I think we can update that scaladoc too to provide additional warning that it prints arguments

This class would still be very valuable for debugging purposes in non-production environments.
Indeed it is true that it could log sensitive data.

EDIT: I added a scaladoc to make the purpose clear.

I think this should be an error too? (e.g. error in Put/Get definition)

It seemed to me not as severe like ExecFailure, and giving it a different priority also give more power to tune what (and how) is logged.

But if you'd still prefer to have both as errors, no problem, just let me know.

Thinking about it more, perhaps both these failure cases should be warn level because

• If the failure isn't intentional, their code is going to fail anyway and their execution will fail with an Exception anwyay.
• If the (Execution) failure is intentional, then we don't really want to log at error level to avoid triggering alerts.

WDYT? I don't really mind