Author: ggregory
Date: Sun Mar 8 12:37:40 2026
New Revision: 82921
Log:
Publish commons-logging 1.3.6 Release
Added:
release/commons/logging/binaries/commons-logging-1.3.6-bin.tar.gz
- copied unchanged from r82920,
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.tar.gz
release/commons/logging/binaries/commons-logging-1.3.6-bin.tar.gz.asc
- copied unchanged from r82920,
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.tar.gz.asc
release/commons/logging/binaries/commons-logging-1.3.6-bin.tar.gz.sha512
- copied unchanged from r82920,
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.tar.gz.sha512
release/commons/logging/binaries/commons-logging-1.3.6-bin.zip
- copied unchanged from r82920,
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.zip
release/commons/logging/binaries/commons-logging-1.3.6-bin.zip.asc
- copied unchanged from r82920,
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.zip.asc
release/commons/logging/binaries/commons-logging-1.3.6-bin.zip.sha512
- copied unchanged from r82920,
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.zip.sha512
release/commons/logging/source/commons-logging-1.3.6-src.tar.gz
- copied unchanged from r82920,
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.tar.gz
release/commons/logging/source/commons-logging-1.3.6-src.tar.gz.asc
- copied unchanged from r82920,
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.tar.gz.asc
release/commons/logging/source/commons-logging-1.3.6-src.tar.gz.sha512
- copied unchanged from r82920,
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.tar.gz.sha512
release/commons/logging/source/commons-logging-1.3.6-src.zip
- copied unchanged from r82920,
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.zip
release/commons/logging/source/commons-logging-1.3.6-src.zip.asc
- copied unchanged from r82920,
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.zip.asc
release/commons/logging/source/commons-logging-1.3.6-src.zip.sha512
- copied unchanged from r82920,
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.zip.sha512
Replaced:
release/commons/logging/RELEASE-NOTES.txt
- copied unchanged from r82920,
dev/commons/logging/1.3.6-RC1/RELEASE-NOTES.txt
Deleted:
dev/commons/logging/1.3.6-RC1/RELEASE-NOTES.txt
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.tar.gz
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.tar.gz.asc
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.tar.gz.sha512
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.zip
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.zip.asc
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.zip.sha512
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.tar.gz
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.tar.gz.asc
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.tar.gz.sha512
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.zip
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.zip.asc
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.zip.sha512
Copied: release/commons/logging/RELEASE-NOTES.txt (from r82920,
dev/commons/logging/1.3.6-RC1/RELEASE-NOTES.txt)
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ release/commons/logging/RELEASE-NOTES.txt Sun Mar 8 12:37:40 2026
(r82921, copy of r82920, dev/commons/logging/1.3.6-RC1/RELEASE-NOTES.txt)
@@ -0,0 +1,804 @@
+Apache Commons Logging 1.3.6 Release Notes
+------------------------------------------
+
+The Apache Commons Logging team is pleased to announce the release of Apache
Commons Logging 1.3.6.
+
+Apache Commons Logging is a thin adapter allowing configurable bridging to
other,
+well-known logging systems.
+
+This is a feature and maintenance release. Java 8 or later is required.
+
+Changes in this version
+-----------------------
+
+
+Fixed Bugs
+----------
+
+* Fix running spotbugs:check: Unable to parse configuration of
mojo. Thanks to Gary Gregory.
+* Update deprecated call in
PathableClassLoader.addLogicalLib(String). Thanks to Gary Gregory.
+* Fix malformed Javadoc comments. Thanks to Gary Gregory.
+* Fix log level in Slf4jLogFactory.error(Object, Throwable)
#416. Thanks to Gary Gregory.
+
+Changes
+-------
+
+* Bump org.apache.commons:commons-parent from 81 to 97 #361,
#367, #388, #409, #410. Thanks to Gary Gregory, Dependabot.
+* Bump org.slf4j:slf4j-api from 2.0.16 to 2.0.17 #344. Thanks to
Gary Gregory, Dependabot.
+* Bump com.h3xstream.findsecbugs:findsecbugs-plugin from 1.13.0
to 1.14.0 #360. Thanks to Gary Gregory, Dependabot.
+* Bump log4j2.version from 2.24.3 to 2.25.3 #371, #412. Thanks
to Gary Gregory, Dependabot.
+* Bump org.apache.commons:commons-lang3 from 3.17.0 to 3.20.0
#373. Thanks to Gary Gregory, Dependabot.
+* Bump ch.qos.logback:logback-core from 1.3.14 to 1.3.16 #411..
Thanks to Gary Gregory, Dependabot.
+
+
+Historical list of changes:
https://commons.apache.org/proper/commons-logging/changes.html
+
+Download it from
https://commons.apache.org/proper/commons-logging/download_logging.cgi
+
+For complete information on Apache Commons Logging, including instructions on
how to submit bug reports,
+patches, or suggestions for improvement, see the Apache Commons Logging
website:
+
+https://commons.apache.org/proper/commons-logging/
+
+-----------------------------------------------------------------------------
+
+Apache Commons Logging 1.3.5 Release Notes
+------------------------------------------
+
+The Apache Commons Logging team is pleased to announce the release of Apache
Commons Logging 1.3.5.
+
+Apache Commons Logging is a thin adapter allowing configurable bridging to
other,
+well-known logging systems.
+
+This is a feature and maintenance release. Java 8 or later is required.
+
+Changes in this version
+-----------------------
+
+
+Fixed Bugs
+----------
+
+* Javadoc is missing its Overview page. Thanks to Gary Gregory.
+* Remove -nouses directive from maven-bundle-plugin. OSGi
package imports now state 'uses' definitions for package imports, this doesn't
affect JPMS (from org.apache.commons:commons-parent:80). Thanks to Gary Gregory.
+
+Changes
+-------
+
+* Bump org.apache.commons:commons-parent from 72 to 81 #285,
#287, #295, #298, #303, #310, #339. Thanks to Gary Gregory, Dependabot.
+* Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0
#288 [test]. Thanks to Gary Gregory, Dependabot.
+* Bump log4j2.version from 2.23.1 to 2.24.3 #292, #299, #319,
#328. Thanks to Gary Gregory, Dependabot.
+
+Removed:
+* Remove "cobertura" plugin, we use JaCoco, Cobertura is
unmaintained. Thanks to Gary Gregory.
+
+Historical list of changes:
https://commons.apache.org/proper/commons-logging/changes.html
+
+Download it from
https://commons.apache.org/proper/commons-logging/download_logging.cgi
+
+For complete information on Apache Commons Logging, including instructions on
how to submit bug reports,
+patches, or suggestions for improvement, see the Apache Commons Logging
website:
+
+https://commons.apache.org/proper/commons-logging/
+
+-----------------------------------------------------------------------------
+
+Apache Commons Logging 1.3.5 Release Notes
+------------------------------------------
+
+The Apache Commons Logging team is pleased to announce the release of Apache
Commons Logging 1.3.5.
+
+Apache Commons Logging is a thin adapter allowing configurable bridging to
other,
+well-known logging systems.
+
+This is a feature and maintenance release. Java 8 or later is required.
+
+Changes in this version
+-----------------------
+
+
+Changes
+-------
+
+* Bump org.apache.commons:commons-parent from 72 to 78 #285,
#287, #295, #298, #303, #310. Thanks to Gary Gregory, Dependabot.
+* Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0
#288 [test]. Thanks to Gary Gregory, Dependabot.
+* Bump log4j2.version from 2.23.1 to 2.24.2 #292, #299, #319.
Thanks to Gary Gregory, Dependabot.
+
+Removed:
+* Remove "cobertura" plugin, we use JaCoco, Cobertura is
unmaintained. Thanks to Gary Gregory.
+
+Historical list of changes:
https://commons.apache.org/proper/commons-logging/changes-report.html
+
+Download it from
https://commons.apache.org/proper/commons-logging/download_logging.cgi
+
+For complete information on Apache Commons Logging, including instructions on
how to submit bug reports,
+patches, or suggestions for improvement, see the Apache Commons Logging
website:
+
+https://commons.apache.org/proper/commons-logging/
+
+-----------------------------------------------------------------------------
+
+Apache Commons Logging 1.3.4 Release Notes
+------------------------------------------
+
+The Apache Commons Logging team is pleased to announce the release of Apache
Commons Logging 1.3.4.
+
+Apache Commons Logging is a thin adapter allowing configurable bridging to
other,
+well-known logging systems.
+
+This is a feature and maintenance release. Java 8 or later is required.
+
+Changes in this version
+-----------------------
+
+
+Fixed Bugs
+----------
+
+* LOGGING-192: Fix factory loading from context class loader #280, #281.
Thanks to Bj�rn Kautler, Piotr Karwasz.
+
+Changes
+-------
+
+* Bump org.apache.commons:commons-parent from 71 to 72. Thanks
to Gary Gregory.
+* Bump org.slf4j:slf4j-api from 2.0.13 to 2.0.16 #276, #282.
Thanks to Gary Gregory, Dependabot.
+
+
+Historical list of changes:
https://commons.apache.org/proper/commons-logging/changes-report.html
+
+Download it from
https://commons.apache.org/proper/commons-logging/download_logging.cgi
+
+For complete information on Apache Commons Logging, including instructions on
how to submit bug reports,
+patches, or suggestions for improvement, see the Apache Commons Logging
website:
+
+https://commons.apache.org/proper/commons-logging/
+
+-----------------------------------------------------------------------------
+
+Apache Commons Logging 1.3.3 Release Notes
+------------------------------------------
+
+The Apache Commons Logging team is pleased to announce the release of Apache
Commons Logging 1.3.3.
+
+Apache Commons Logging is a thin adapter allowing configurable bridging to
other,
+well-known logging systems.
+
+This is a feature and maintenance release. Java 8 or later is required.
+
+
+Fixed Bugs
+----------
+
+* LOGGING-193: Update Log4j 2 OSGi imports #268. Thanks to Philippe Marschall.
+* Fix PMD UnnecessaryFullyQualifiedName in SimpleLog. Thanks to
Gary Gregory.
+* Fix NullPointerException in SimpleLog#write(Object) on null
input. Thanks to Gary Gregory.
+* Fix NullPointerException in SimpleLog#write(StringBuffer) on
null input. Thanks to Gary Gregory.
+
+Changes
+-------
+
+* Bump org.apache.commons:commons-parent from 69 to 71 #267.
Thanks to Dependabot.
+
+
+Historical list of changes:
https://commons.apache.org/proper/commons-logging/changes-report.html
+
+Download it from
https://commons.apache.org/proper/commons-logging/download_logging.cgi
+
+For complete information on Apache Commons Logging, including instructions on
how to submit bug reports,
+patches, or suggestions for improvement, see the Apache Commons Logging
website:
+
+https://commons.apache.org/proper/commons-logging/
+
+-----------------------------------------------------------------------------
+
+Apache Commons Logging 1.3.2 Release Notes
+------------------------------------------
+
+The Apache Commons Logging team is pleased to announce the release of Apache
Commons Logging 1.3.2.
+
+Apache Commons Logging is a thin adapter allowing configurable bridging to
other,
+well-known logging systems.
+
+This is a feature and maintenance release. Java 8 or later is required.
+
+Changes in this version
+-----------------------
+
+Fixed Bugs
+----------
+
+* LOGGING-190: Add OSGi metadata to enable Service Loader Mediator #234.
Thanks to Hannes Wellmann, Gary Gregory, Johan Compagner.
+* LOGGING-191: Apache commons logging shows 1.4 as latest release instead of
1.3.1. Thanks to Hannes Wellmann, Gary Gregory, Johan Compagner.
+* Deprecate
org.apache.commons.logging.LogSource.jdk14IsAvailable. Thanks to Gary Gregory.
+
+Changes
+-------
+
+* Bump org.apache.commons:commons-parent from 67 to 69 #240.
Thanks to Dependabot.
+* Bump org.slf4j:slf4j-api from 2.0.12 to 2.0.13 #248. Thanks to
Dependabot.
+
+Historical list of changes:
https://commons.apache.org/proper/commons-logging/changes-report.html
+
+Download it from
https://commons.apache.org/proper/commons-logging/download_logging.cgi
+
+For complete information on Apache Commons Logging, including instructions on
how to submit bug reports,
+patches, or suggestions for improvement, see the Apache Commons Logging
website:
+
+https://commons.apache.org/proper/commons-logging/
+
+-----------------------------------------------------------------------------
+
+Apache Commons Logging 1.3.1 Release Notes
+------------------------------------------
+
+The Apache Commons Logging team is pleased to announce the release of Apache
Commons Logging 1.3.1.
+
+Apache Commons Logging is a thin adapter allowing configurable bridging to
other,
+well-known logging systems.
+
+This is a feature and maintenance release. Java 8 or later is required.
+
+Changes in this version
+-----------------------
+
+New features
+------------
+
+* Add Maven property project.build.outputTimestamp for build
reproducibility. Thanks to Gary Gregory.
+
+Fixed Bugs
+----------
+
+* Remove references to very old JDK and Commons Logging versions
#201. Thanks to Elliotte Rusty Harold.
+* Update from Logj 1 to the Log4j 2 API compatibility layer
#231. Thanks to Gary Gregory, Piotr P. Karwasz.
+* Allow Servlet 4 in OSGi environment #191. Thanks to V�clav
Haisman.
+* Fix generics warnings #213. Thanks to Elliotte Rusty Harold.
+* LOGGING-189: Fix Import-Package entry for org.slf4j #188. Thanks to V�clav
Haisman, Sebb, Hannes Wellmann, Gary Gregory, Piotr P. Karwasz.
+
+Changes
+-------
+
+* Bump org.apache.commons:commons-parent from 65 to 67. Thanks
to Dependabot.
+* Bump log4j2.version from 2.21.1 to 2.23.1 #187, #230. Thanks
to Dependabot, Piotr P. Karwasz.
+* Bump org.slf4j:slf4j-api from 2.0.9 to 2.0.12 #207. Thanks to
Dependabot.
+* Bump ch.qos.logback:logback-classic from 1.3.11 to 1.3.14
#212. Thanks to Dependabot, Gary Gregory.
+* Bump ch.qos.logback:logback-core from 1.3.11 to 1.3.14 #211.
Thanks to Dependabot, Gary Gregory.
+* Bump com.h3xstream.findsecbugs:findsecbugs-plugin from 1.12.0
to 1.13.0. Thanks to Dependabot.
+* Bump logkit from 1.0.1 to 2.0 #32. Thanks to Dependabot.
+
+
+Historical list of changes:
https://commons.apache.org/proper/commons-logging/changes-report.html
+
+Download it from
https://commons.apache.org/proper/commons-logging/download_logging.cgi
+
+For complete information on Apache Commons Logging, including instructions on
how to submit bug reports,
+patches, or suggestions for improvement, see the Apache Commons Logging
website:
+
+https://commons.apache.org/proper/commons-logging/
+
+
+-----------------------------------------------------------------------------
+
+Apache Commons Logging 1.3.0 Release Notes
+------------------------------------------
+
+The Apache Commons Logging team is pleased to announce the release of Apache
Commons Logging 1.3.0.
+
+Apache Commons Logging is a thin adapter allowing configurable bridging to
other,
+well-known logging systems.
+
+This is a feature and maintenance release. Java 8 or later is required.
+
+Changes in this version include:
+
+New features
+------------
+* Add support for Log4j API and SLF4J #177. Thanks to Piotr P.
Karwasz.
+* Deprecate org.apache.commons.logging.impl.WeakHashtable
without replacement. Thanks to Piotr P. Karwasz.
+* LOGGING-188: Deprecate and disable `Jdk13LumberjackLogger` and
`Log4JLogger`. Thanks to Piotr P. Karwasz.
+* LOGGING-173: Deprecate and disable `AvalonLogger` and `LogKitLogger`.
Thanks to SingingBush.
+* LOGGING-165: Add Automatic-Module-Name Manifest Header for Java 9
compatibility.
+
+Fixed Bugs
+----------
+
+* LOGGING-163: BufferedReader is not closed properly. Thanks to Kaloyan
Spiridonov.
+* LOGGING-177: Remove redundant initializer #46 Thanks to Arturo Bernal.
+* Use a weak reference for the cached class loader #71. Thanks
to Jakob van Kruijssen, Bruno P. Kinoshita, Gary Gregory.
+* Add more entries to .gitignore file #25. Thanks to
xiaozhiliaoo.
+* Minor Improvements #34. Thanks to Arturo Bernal.
+* [StepSecurity] ci: Harden GitHub Actions #145. Thanks to
step-security-bot, Gary Gregory.
+* LOGGING-185: Replace custom code with `ServiceLoader` call. Thanks to Piotr
P. Karwasz.
+* Fix possible NPEs in LogFactoryImpl. Thanks to Gary Gregory.
+* LOGGING-185: Fix failing tests #180. Thanks to Piotr P. Karwasz.
+* Deprecate LogConfigurationException.cause in favor of
getCause(). Thanks to Gary Gregory.
+* Fix SpotBugs [ERROR] High: Found reliance on default encoding
in org.apache.commons.logging.LogFactory.initDiagnostics(): new
java.io.PrintStream(OutputStream) [org.apache.commons.logging.LogFactory] At
LogFactory.java:[line 1205] DM_DEFAULT_ENCODING. Thanks to Gary Gregory.
+* Fix SpotBugs [ERROR] Medium: Class
org.apache.commons.logging.impl.WeakHashtable defines non-transient
non-serializable instance field queue
[org.apache.commons.logging.impl.WeakHashtable] In WeakHashtable.java
SE_BAD_FIELD. Thanks to Gary Gregory.
+* Set java.logging as optional module #183. Thanks to Piotr P.
Karwasz.
+* Fix SpotBugs [ERROR] Medium: Switch statement found in
org.apache.commons.logging.impl.SimpleLog.log(int, Object, Throwable) where
default case is missing [org.apache.commons.logging.impl.SimpleLog] At
SimpleLog.java:[lines 505-522] SF_SWITCH_NO_DEFAULT. Thanks to Gary Gregory.
+* Deprecate
org.apache.commons.logging.impl.Jdk13LumberjackLogger.dummyLevel without
replacement. Thanks to Gary Gregory.
+
+Changes
+-------
+
+* Bump Java from 6 to 8. Thanks to Gary Gregory.
+* Bump actions/cache from 2 to 3.0.10 #50, #77, #95, #98, #107,
#110. Thanks to Dependabot, Gary Gregory.
+* Bump actions/checkout from 2.3.1 to 3.1.0, #24, #63, #75,
#109. Thanks to Dependabot, Gary Gregory.
+* Bump actions/setup-java from 1.4.0 to 3.5.1 #21. Thanks to
Dependabot, Gary Gregory.
+* Bump junit from 3.8.1 to 5.9.1 Vintage #23, #38. Thanks to
Dependabot, Gary Gregory.
+* Bump clirr-maven-plugin from 2.2.2 to 2.8 #14. Thanks to
Dependabot.
+* Bump findbugs-maven-plugin from 2.5.2 to 3.0.5 #8. Thanks to
Dependabot.
+* Bump maven-failsafe-plugin from 2.12 to 3.0.0-M7 #31, #91.
Thanks to Dependabot, Gary Gregory.
+* Bump spotbugs-surefire-plugin from 2.22.2 to 3.0.0-M5. Thanks
to Gary Gregory.
+* Bump maven-dependency-plugin from 2.4 to 3.5.0 #29, #79, #117,
#131. Thanks to Dependabot.
+* Bump maven-pmd-plugin from 3.3 to 3.19.0 #28, #90, #100, #103.
Thanks to Dependabot.
+* Bump maven-assembly-plugin from 2.5 to 3.4.2 #30, #94, #96.
Thanks to Dependabot.
+* Bump servlet-api from 2.3 to 2.5 #27. Thanks to Dependabot.
+* Bump maven-checkstyle-plugin from 2.7 to 3.2.1 #35, #101,
#130. Thanks to Gary Gregory, Dependabot.
+* Bump spotbugs-maven-plugin from 4.1.4 to 4.7.2.1 #33, #70,
#78, #93, #97, #102, #112. Thanks to Dependabot.
+* Bump spotbugs from 4.5.3 to 4.7.3 #81, #87, #92, #104, #115.
Thanks to Dependabot.
+* Bump commons-parent from 52 to 65 #82, #106, #122, #126, #143.
Thanks to Dependabot, Gary Gregory.
+* Bump github/codeql-action from 1 to 2 #86. Thanks to
Dependabot.
+
+
+Historical list of changes:
https://commons.apache.org/proper/commons-logging/changes-report.html
+
+Download it from
https://commons.apache.org/proper/commons-logging/download_logging.cgi
+
+For complete information on Apache Commons Logging, including instructions on
how to submit bug reports,
+patches, or suggestions for improvement, see the Apache Commons Logging
website:
+
+https://commons.apache.org/proper/commons-logging/
+
+-----------------------------------------------------------------------------
+
+Apache Commons Logging 1.2 Release Notes
+----------------------------------------
+
+The Apache Commons Logging team is pleased to announce
+the release of Apache Commons Logging 1.2
+
+Apache Commons Logging is a thin adapter allowing configurable
+bridging to other, well-known logging systems.
+
+This is a maintenance release containing bug fixes.
+Java 1.2 or later is required.
+
+Changes in this version
+-----------------------
+
+Fixed Bugs
+----------
+
+* LOGGING-37: Improve performance of LogFactory#getFactory() by calling
+ Thread#currentThread()#getContextClassLoader() directly instead
+ of using reflection. As a consequence support for JDK 1.1 has
+ been dropped. Thanks to Matthias Ernst, Archie Cobbs.
+* LOGGING-156: Fix SecurityAllowedTestCase when executed with OpenJDK 1.7 due
+ to an additional required RuntimePermission. Thanks to Mikolaj
Izdebski.
+* LOGGING-157: Fix javadoc to comply with javadoc tool from jdk 1.8. Thanks
to Ville Skyttä.
+
+
+Historical list of changes:
http://commons.apache.org/proper/commons-logging/changes-report.html
+
+For complete information on Apache Commons Logging, including instructions on
how to submit bug reports,
+patches, or suggestions for improvement, see the Apache Commons Logging
website:
+
+http://commons.apache.org/proper/commons-logging/
+
+-----------------------------------------------------------------------------
+
+Apache Commons Logging 1.1.3 Release Notes
+------------------------------------------
+
+The Commons Logging team is pleased to announce the release of Apache Commons
Logging 1.1.3
+
+Commons Logging is a thin adapter allowing configurable bridging to other,
+well known logging systems.
+
+This is a maintenance release containing bug fixes.
+
+Changes in this version include:
+
+Fixed Bugs:
+o LOGGING-151: Use "org.apache.commons.logging" as bundle symbolic name.
Thanks to Krzysztof Daniel.
+
+Historical list of changes:
http://commons.apache.org/proper/commons-logging/changes-report.html
+
+For complete information on Commons Logging, including instructions on how to
submit bug reports,
+patches, or suggestions for improvement, see the Apache Commons Logging
website:
+
+http://commons.apache.org/proper/commons-logging/
+
+-----------------------------------------------------------------------------
+
+Apache Commons Logging 1.1.2 Release Notes
+------------------------------------------
+
+The Commons Logging team is pleased to announce the release of Apache Commons
Logging 1.1.2
+
+Commons Logging is a thin adapter allowing configurable bridging to other,
+well known logging systems.
+
+This is a maintenance release containing bug fixes.
+
+Changes in this version include:
+
+
+Fixed Bugs:
+o LOGGING-124: The jar manifest now contains proper OSGi-related metadata
information. Thanks to Christian Schneider.
+o LOGGING-144: LogFactory and LogFactoryImpl will not swallow certain errors
anymore (ThreadDeath
+ and VirtualMachineError). Thanks to Sebastian Bazley.
+o LOGGING-132: Jdk14Logger now correctly uses the specified logger name.
Thanks to Nathan Niesen.
+o LOGGING-146: Properly synchronize access to protected static field
LogFactory.nullClassLoaderFactory.
+ Thanks to Sebastian Bazley.
+o LOGGING-119: Prevent potential deadlock scenario in WeakHashtable. Thanks
to Nitzan Niv, Philippe Mouawad.
+o LOGGING-130: Potential missing privileged block for class loader. Thanks to
Matthew P. Del Buono.
+o LOGGING-145: LogFactoryImpl.setAttribute - possible NPE.
+o LOGGING-142: Log4JLogger uses deprecated static members of Priority such as
INFO. Thanks to Jingguo Yao.
+o LOGGING-128: Static analysis suggests a number of potential improvements.
Thanks to Peter Lawrey.
+o LOGGING-147: SimpleLog.log - unsafe update of shortLogName.
+o LOGGING-148: LogFactory.diagnosticPrefix and diagnosticsStream could be
final.
+
+Changes:
+o LOGGING-135: Improved thread-safety for several log adapters, including
AvalonLogger, SimpleLog,
+ Log4JLogger, LogKitLogger. Thanks to Sebastian Bazley.
+o LOGGING-138: In case of a discovery failure now also the stacktrace of the
cause will be
+ added to the diagnostic message. Thanks to Luke Lu.
+o LOGGING-133: Change scope of Jdk14Logger.log(Level, String, Throwable) to
protected, allowing
+ subclasses to modify the logging output. Thanks to Shevek.
+
+
+Historical list of changes:
http://commons.apache.org/logging/changes-report.html
+
+For complete information on Commons Logging, including instructions on how to
submit bug reports,
+patches, or suggestions for improvement, see the Apache Commons Logging
website:
+
+http://commons.apache.org/logging/
+
+-----------------------------------------------------------------------------
+
+Apache Commons Logging Package 1.1.1 Release Notes
+--------------------------------------------------
+
+This release of Apache Commons Logging is a maintenance release, with just a
+couple of fixes for using Commons Logging under restrictive security policies.
+
+All core classes were compiled with Maven using a 1.4.x JDK, with target set
+to 1.1 and source set to 1.2. Commons Logging may work on some
+augmented 1.1 series JREs but it is recommended that those wish to run
+on 1.1 JREs download the source and create a custom implementation by
+stripping out all the complex classloader management code.
+
+For further details, please see the Apache Commons Logging website:
+ http://commons.apache.org/logging/
+
+For the very latest news, hints, FAQs etc. please see the
+Apache Commons Logging wiki site:
+ http://wiki.apache.org/commons/Logging
+
+Note that some containers (some versions of Apache Tomcat and JBoss in
+particular) prevent webapps, ejbs, etc from overriding the commons-logging
+implementation provided by the container. This means that bundling this
+updated implementation with a deployed application may not have any effect.
+See the commons-logging site and/or the wiki for more information.
+
+New Features Since 1.1.0
+------------------------
+
+None.
+
+Incompatibilities
+-----------------
+
+The protected method LogFactory.getContextClassLoader has been reverted to
pre-1.1
+behaviour. In earlier releases, this method did not use an AccessController
when
+obtaining the context classloader. In version 1.1 it did. In this release, it
has
+reverted to not using an AccessController; any user-level code that needs to
obtain
+a context classloader should itself create an AccessController, and call the
+LogFactory.getContextClassLoader method via the doPrivileged method. This
fixes a
+potential security issue, where untrusted code could get access to the context
+classloader if a signed Commons Logging library was in the classpath.
+
+Dependencies
+------------
+
+Commons Logging has no mandatory dependencies.
+
+Java 1.2 and later are supported. It may be possible to use this release with
+java 1.1 but this has not been tested; the unit tests certainly don't run on
+that version.
+
+Distributed Jar Files
+---------------------
+
+File commons-logging-nn.jar is the one most people will want. It provides the
+base implementation and adapters to a number of popular logging libraries.
+
+File commons-logging-adapters-nn.jar includes only the adapters to various
+concrete logging libraries. When commons-logging-nn.jar or
+commons-logging-api-nn.jar is deployed in a container classpath, then this
+adapters-only jar file should be deployed in the webapp, not the complete
Commons
+Logging distribution. This ensures that the core Log/LogFactory classes are
only
+deployed via one classloader, thus avoiding "Log4JLogger does not implement
Log"
+and similar problems.
+
+File commons-logging-api-nn.jar provides minimal adapters to external logging
+libraries, just the internally implemented SimpleLog and NoOpLog classes
+plus Jdk14Logger (which is currently required by Apache Tomcat).
+
+The file commons-logging-api-nn.jar may be used as a declared dependency for
+projects that care about "transitive dependencies" and can't handle jar files
+such as commons-logging-nn.jar which have "optional" dependencies depending on
+how they are used. In addition, this jar file can be useful for "rebundlers" of
+Commons Logging who recompile the source-code but who may not be able to
+recompile against the full set of supported adapters; such projects should be
+able to at least recreate an equivalent of this jar file.
+
+General Notes
+-------------
+
+The Apache Commons project has migrated to the Subversion version control
system
+(previously, CVS was used). There should be no effect on users of the Commons
+Logging library, but obviously the process of examining the latest source code,
+and of creating patches for Commons Logging has now changed. Please see the
+Apache Commons website for details (http://commons.apache.org/).
+
+The Apache Commons project has now moved to using the Apache JIRA installation
+as its bugtracking system (formerly, the Apache Bugzilla installation was
used).
+
+All source files for this release have been updated to reflect the new Apache
+Software Foundation licensing rules. The terms and conditions are unaltered;
+this merely affects how those are presented in the source files. See
+ http://www.apache.org/legal/src-headers.html
+
+This release can be built/tested with Maven 2.0.x as well as Ant. Note that
+building with Maven 1.x is no longer supported. The files used to build Commons
+Logging with Maven 1.x will be removed in a future version of Commons Logging.
+
+Bugs Fixed
+----------
+
+* LOGGING-106: Commons Logging 1.1 was completely unusable under a security
+ policy that prevented access to system properties. Even signing/authorising
+ the Commons Logging library was not sufficient. This has been fixed by (a)
+ catching SecurityException and falling back to a sensible default, and (b)
+ using AccessController so Commons Logging can be granted privileges without
+ needing the caller to have them too.
+
+* LOGGING-107: Commons Logging 1.1 auto-discovery failed under a security
+ policy that prevented calls to ClassLoader.getParent. Signing/authorising the
+ Commons Logging library was not sufficient as an AccessController was not
used.
+ This has been fixed by catching SecurityException and using an
AccessController.
+
+* LOGGING-111, LOGGING-114: Show the contents of chained exceptions, to make
+ debugging easier, in particular when using Commons Logging together with
Log4J.
+
+* LOGGING-113: pom.xml in maven repository does not list dependencies as
optional.
+
+* LOGGING-115: NPE thrown due to exception message logging.
+
+* LOGGING-117: Unit tests fail on linux with java16.
+
+* LOGGING-118: Generate source and binary archives.
+
+* MEV-392 (http://jira.codehaus.org/browse/MEV-392)
+ As Commons Logging didn't provide a Maven2 pom.xml file, one was helpfully
+ created by people not involved with the commons-logging project and published
+ to the standard maven repositories. Unfortunately this pom declared normal
+ dependencies on all the logging libraries that are supported by the core
+ Commons Logging distribution, meaning they all get pulled into a project that
+ declares a dependency on Commons Logging 1.1. This release now provides an
+ "official" pom.xml which declares these dependencies as optional so they
aren't
+ automatically included in projects that depend on Commons Logging 1.1.1.
+
+* (no bug#): Fix thread-safety bug (SimpleDateFormat.format is not
thread-safe).
+ Thanks to Martin Wilson of bright-interactive for the bug report.
+
+* (no bug#): Security issue regarding access to context classloader (see
+ incompatibilities section above).
+
+DEPRECATIONS
+------------
+
+ (These are carried forward from Version 1.0.4)
+
+[LogSource] Previously deprecated, replaced by LogFactory.
+
+-----------------------------------------------------------------------------
+
+Apache Commons Logging 1.0.4 Release Notes
+------------------------------------------
+
+This document contains the release notes for this version of the Commons
+Logging package. It is primarily a service release for downstream users.
+The main emphasis maintenance and code cleanup release,
+with some new features including support for both the old 1.2.x series
+of Log4J releases and the new 1.3.x series of releases.
+
+The following paragraphs document changes since the previous release
+(version 1.0.3). The documentation (userguide and javadoc)
+has also been improved.
+
+New Features
+------------
+
+[ALL FILES] This version of Commons Logging is released under the
+ Apache License (Version 2.0). All source files have been
+ modified to reflect this.
+
+[maven.xml] Added beginnings of a Maven-based build, primarily for the
+ purpose of creating documentation consistent with Mavenized
+ commons projects. The official build system for the
software
+ is still the Ant "build.xml" file.
+
+[AvalonLogger] Added AvalonLogger, which wraps the logger used by the
+ Avalon framework. As with other implementations, this
+ is compiled only if the appropriate dependencies are
+ satisfied.
+
+[Jdk13LumberjackLogger]
+ Added Jdk13LumberjackLogger, which wraps the implementation
+ of the JSR-47 logging APIs (for JDKs before 1.4) provided
+ by the SourceForge "lumberjack" project.
+ <http://sourceforge.net/projects/lumberjack/>
+
+[LogFactoryImpl] If an InvocationTargetException is returned during the
+ creation of a new Log instance, unwrap the underlying
+ cause and pass it in to the LogConfigurationException
+ constructor. This will make the actual cause of the
+ problem easier to diagnose.
+
+[LogFactoryImpl] If the isAssignableFrom() test fails because there is more
+ than one instance of org.apache.commons.logging.Log visible
+ in the class loader hierarchy, make the exception message
+ that is reported explicitly state this, rather than the
+ potentially misleading claim that an implementation class
+ does not implement Log.
+
+[Log4JLogger] Changes to allow this logger to support both the existing
1.2.x
+ series of releases and also the upcoming 1.3.x series of
Log4J
+ releases.
+
+[SimpleLog] Added support for setting date-time format.
+
+Bug Fixes
+---------
+
+[MANIFEST.MF] Remove reference to Log4J from the manifest classpath.
+
+[LogConfigurationException]
+ Include root cause in the text of the message, if present.
+
+[LogFactory] Improve usability of error messages reporting
+ configuration problems.
+
+[JDK14Logger] Implement Serializable, remove "final" declaration for
+ easy subclassing.
+
+[Log4JLogger] Implement Serializable, remove "final" declaration for
+ easy subclassing.
+
+[NoOpLogger] Implement Serializable, remove "final" declaration for
+ easy subclassing.
+
+[SimpleLog] Make SimpleLog more friendly to the security manager
+ in an applet environment, by swallowing any security
+ exceptions when looking up system properties that are
+ not accessible.
+
+Deprecations
+------------
+
+ (These are carried forward from Version 1.0.3)
+
+[LogSource] Previously deprecated, replaced by LogFactory.
+
+[Log4jFactory] A proxy instance of this class was transparently created
+ when Log4J logging was selected, yet it serves no useful
+ purpose. The class is now deprecated, and the proxy
+ instance is no longer created.
+
+[Log4JCategoryLog] This class has been replaced by Log4JLogger, which
+ corresponds to the availability of the new Logger class
+ in Log4J 1.2 and later.
+
+-----------------------------------------------------------------------------
+
+Apache Commons Logging 1.0.3 Release Notes
+------------------------------------------
+
+This document contains the release notes for this version of the Commons
+Logging package. It is primarily a maintenance and code cleanup release,
+with minimal new features.
+
+The following paragraphs document changes since the previous release
+(version 1.0.2).
+
+New Features
+------------
+
+[build.xml] Refined build process to correctly avoid compiling classes
+ when dependencies are not available, and to avoid name
+ clashes over Ant properties used in different ways.
+
+[unit tests] Added new suites of tests for the Log4J and JDK 1.4
+ logging implementations, including tests with multiple
+ class loaders that closely simulate the scenario of using
+ commons-logging in a servlet container.
+
+[documentation] Overall cleanup and correction of the Javadoc documentation
+ to correctly reflect the current behavior. In particular,
+ the default logging implementation (selected if nothing
+ else is configured) is now SimpleLog, not NoOpLog.
+
+[LogFactory] Add a static release(ClassLoader) method that allows,
+ for example, a webapp to clean up all c-l references
+ prior to being shut down.
+
+Bug Fixes
+---------
+
+[build.xml] Correct the META-INF/MANIFEST.MF that was embedded in the
+ generated JAR files to properly contain the version number.
+
+[LogFactory] Fix security violations on several ClassLoader method
+ invocations.
+
+[SimpleLog] Dump stack trace through logger, instead of directly to
+ System.out, to preserve output sequence.
+
+[SimpleLog] Avoid a security exception if system properties cannot be
+ read (such as in an applet).
+
+[Bugzilla 10825] NullPointerException when Logger.getClassLoader()
+ returns null.
+
+[Bugzilla 13118] Correct detection of JDK 1.4 that was mis-identifying on a
+ scenario where a JDK 1.3 implementation included an
+ implementation of JSR-47 logging.
+
+[Bugzilla 13157] Incorrect selection of Log4J in a servlet container.
+
+[Bugzilla 13201] Log4JLogger should not attempt to auto-configure
+ appenders; this is out of scope for commons-logging.
+
+[Bugzilla 17561] Attempts to override Log4J configuration.
+
+[Bugzilla 17894] Unable to configure commons-logging SimpleLog for a webapp.
+
+[Bugzilla 18184] Jdk14Logger should not waste the effort to create a
+ Throwable (to extract calling class and method) if the
+ message is not going to be logged anyway.
+
+
+Deprecations
+------------
+
+[LogSource] Previously deprecated, replaced by LogFactory.
+
+[Log4jFactory] A proxy instance of this class was transparently created
+ when Log4J logging was selected, yet it serves no useful
+ purpose. The class is now deprecated, and the proxy
+ instance is no longer created.
+
+[Log4JCategoryLog] This class has been replaced by Log4JLogger, which
+ corresponds to the availability of the new Logger class
+ in Log4J 1.2 and later.
+
+-----------------------------------------------------------------------------
+
+Apache Commons Logging Package 1.0 Release Notes
+------------------------------------------------
+
+This document contains the release notes for this version of the Commons
+Logging package. This is the first release of commons-logging.
+
+New Features
+------------
+
+* commons-logging implements an abstraction between logging and the logging
+ implementation being used. You can currently use Avalon's logkit, Log4J,
+ JDK 1.4's logging, or nothing at all. It is up to you.
+
+-----------------------------------------------------------------------------
Copied: release/commons/logging/binaries/commons-logging-1.3.6-bin.tar.gz (from
r82920, dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.tar.gz)
==============================================================================
Binary file (source and/or target). No diff available.
Copied: release/commons/logging/binaries/commons-logging-1.3.6-bin.tar.gz.asc
(from r82920,
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.tar.gz.asc)
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ release/commons/logging/binaries/commons-logging-1.3.6-bin.tar.gz.asc
Sun Mar 8 12:37:40 2026 (r82921, copy of r82920,
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.tar.gz.asc)
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+
+iHUEABYKAB0WIQT03VnJAUi9xSvrkKRTCqXyXCUBHwUCaai7YAAKCRBTCqXyXCUB
+H67qAP9oW5aZJ8u6ur8smZjzwFbUx4ZEH3Ffcrl0KOzd0s/xogEA0KLyHrwM3zq9
+4e3o/BQ8BMu6x/mc9bfdBENGgDEmFgA=
+=cfzq
+-----END PGP SIGNATURE-----
Copied:
release/commons/logging/binaries/commons-logging-1.3.6-bin.tar.gz.sha512 (from
r82920,
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.tar.gz.sha512)
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ release/commons/logging/binaries/commons-logging-1.3.6-bin.tar.gz.sha512
Sun Mar 8 12:37:40 2026 (r82921, copy of r82920,
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.tar.gz.sha512)
@@ -0,0 +1 @@
+15ed28cf924b189c6732e723a0e66f8590caee204800746c639b104e7bff066738778f1c2645a0b14d015e0f2ac7d992d538106c55a216934eebd8489a580d48
Copied: release/commons/logging/binaries/commons-logging-1.3.6-bin.zip (from
r82920, dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.zip)
==============================================================================
Binary file (source and/or target). No diff available.
Copied: release/commons/logging/binaries/commons-logging-1.3.6-bin.zip.asc
(from r82920,
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.zip.asc)
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ release/commons/logging/binaries/commons-logging-1.3.6-bin.zip.asc Sun Mar
8 12:37:40 2026 (r82921, copy of r82920,
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.zip.asc)
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+
+iHUEABYKAB0WIQT03VnJAUi9xSvrkKRTCqXyXCUBHwUCaai7YQAKCRBTCqXyXCUB
+H+iAAQDZl+LB9A3qKuXG/Td0huRUNTfsDNo3r4lakuC27HayfQEAu7l9b7IpWlD0
+cPBcA0xra+39uHwp6FWrXnCcN7ERrwE=
+=M38Q
+-----END PGP SIGNATURE-----
Copied: release/commons/logging/binaries/commons-logging-1.3.6-bin.zip.sha512
(from r82920,
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.zip.sha512)
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ release/commons/logging/binaries/commons-logging-1.3.6-bin.zip.sha512
Sun Mar 8 12:37:40 2026 (r82921, copy of r82920,
dev/commons/logging/1.3.6-RC1/binaries/commons-logging-1.3.6-bin.zip.sha512)
@@ -0,0 +1 @@
+d56185df5b1374fcebf94c7f81915a3a9c121265683f149d939139849256087129e3bbfdfbf3381e06761733d6594becb815e71472b3a6b9b9526944736bebd6
Copied: release/commons/logging/source/commons-logging-1.3.6-src.tar.gz (from
r82920, dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.tar.gz)
==============================================================================
Binary file (source and/or target). No diff available.
Copied: release/commons/logging/source/commons-logging-1.3.6-src.tar.gz.asc
(from r82920,
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.tar.gz.asc)
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ release/commons/logging/source/commons-logging-1.3.6-src.tar.gz.asc Sun Mar
8 12:37:40 2026 (r82921, copy of r82920,
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.tar.gz.asc)
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+
+iHUEABYKAB0WIQT03VnJAUi9xSvrkKRTCqXyXCUBHwUCaai7YQAKCRBTCqXyXCUB
+H1cwAQDQsDLJufwGOs+2m2uZxOquUi+uYZZr2Tu9IGmeHUPrbwEA2mmVwFO8PRBa
+444IMN7RDgudg5M88xtH1XICzrHuwA0=
+=f92p
+-----END PGP SIGNATURE-----
Copied: release/commons/logging/source/commons-logging-1.3.6-src.tar.gz.sha512
(from r82920,
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.tar.gz.sha512)
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ release/commons/logging/source/commons-logging-1.3.6-src.tar.gz.sha512
Sun Mar 8 12:37:40 2026 (r82921, copy of r82920,
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.tar.gz.sha512)
@@ -0,0 +1 @@
+66b7be2f24c3e2900372645eb803613425aa8d1b11337cd57a87e52eef63b25a193ac0bcde361fd7cb5521582dc26030288f97f9410777570b8f460ae5cf6393
Copied: release/commons/logging/source/commons-logging-1.3.6-src.zip (from
r82920, dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.zip)
==============================================================================
Binary file (source and/or target). No diff available.
Copied: release/commons/logging/source/commons-logging-1.3.6-src.zip.asc (from
r82920, dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.zip.asc)
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ release/commons/logging/source/commons-logging-1.3.6-src.zip.asc Sun Mar
8 12:37:40 2026 (r82921, copy of r82920,
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.zip.asc)
@@ -0,0 +1,7 @@
+-----BEGIN PGP SIGNATURE-----
+
+iHUEABYKAB0WIQT03VnJAUi9xSvrkKRTCqXyXCUBHwUCaai7YQAKCRBTCqXyXCUB
+H4pMAP0fl3LErYj0tkeGBiDc0ER0OaPJS+Tg0x32igkmkmU5KgEA3L1ikxPuQi93
+zCZLJtzs7zUStvKHMhtBXPQG+6dDlgc=
+=qxJl
+-----END PGP SIGNATURE-----
Copied: release/commons/logging/source/commons-logging-1.3.6-src.zip.sha512
(from r82920,
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.zip.sha512)
==============================================================================
--- /dev/null 00:00:00 1970 (empty, because file is newly added)
+++ release/commons/logging/source/commons-logging-1.3.6-src.zip.sha512 Sun Mar
8 12:37:40 2026 (r82921, copy of r82920,
dev/commons/logging/1.3.6-RC1/source/commons-logging-1.3.6-src.zip.sha512)
@@ -0,0 +1 @@
+2b920ca8b12f8aa524d49fe34cd9726c7f9efc1989a5ead1675abb6079fcee8e0ace6662cd3001e544337c51f8896f1a5b80bc54fee6ddee24ce8ff9457e4a6a
