Github user bodewig commented on the pull request:
https://github.com/apache/ant/commit/1465c4581ace84548ec9dfc487d62cfec14d84ad#commitcomment-27040705
we should try whether the bridge between 1.x and 2.x works and recommend
our users to use that if it does.
I don't think we should change our POMs as it should be a conscious
decisions of the users whether they want to upgrade their logging dependencies
or not. They may be running Ant in an environment where the risk of an old
Log4j version is acceptable to them.
---
---------------------------------------------------------------------
To unsubscribe, e-mail: dev-unsubscr...@ant.apache.org
For additional commands, e-mail: dev-h...@ant.apache.org
