yuqi1129 opened a new pull request, #11484:
URL: https://github.com/apache/gravitino/pull/11484
### What changes were proposed in this pull request?
Adds `resolutionStrategy.force("org.slf4j:slf4j-api:2.0.17")` to the
existing `configurations.all` block in the root `build.gradle.kts`, alongside
the existing forces for `commons-beanutils` and `snappy-java`.
### Why are the changes needed?
`distribution/package/libs/` contained two versions of `slf4j-api`
simultaneously:
- `slf4j-api-2.0.16.jar` — from modules that only see the catalog-pinned
version
- `slf4j-api-2.0.17.jar` — from modules using `bundles.log4j` (`core`,
`server`, `server-common`), where `log4j-slf4j2-impl:2.25.4` declares a
transitive dependency on `slf4j-api:2.0.17`
Because the `assembleDistribution` copy task collects `runtimeClasspath`
from each subproject independently, and the two versions have different
filenames, `DuplicatesStrategy.EXCLUDE` cannot deduplicate them.
The force ensures all subprojects resolve `slf4j-api` to `2.0.17` (the
higher version already required at runtime), so only one jar ends up in the
distribution.
Fix: #11480
### Does this PR introduce _any_ user-facing change?
No.
### How was this patch tested?
- Verified `:server:dependencies` — all `slf4j-api` entries now show `2.0.16
-> 2.0.17`
- Verified `:common:dependencies` — previously pinned at `2.0.16`, now
forced to `2.0.17`
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
