This is an automated email from the ASF dual-hosted git repository.
ppkarwasz pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/logging-log4j2.git
The following commit(s) were added to refs/heads/main by this push:
new 73d9e13b79 Drop unused managed dependencies and transitive pins from
the parent POM (#4282)
73d9e13b79 is described below
commit 73d9e13b79454c2e7ca042f720a0b3063eb9264b
Author: Piotr P. Karwasz <[email protected]>
AuthorDate: Thu Sep 3 13:24:23 2026 +0200
Drop unused managed dependencies and transitive pins from the parent POM
(#4282)
* Drop unused managed dependencies and transitive pins from the parent POM
`maven-core`, `maven-model` and `plexus-utils` were managed but no
module declares them since `BundleTestInfo` was removed. `guava`,
`guava-testlib`, `commons-pool2` and `jna` were pinned only for
`requireUpperBoundDeps`, and `asm`, `httpclient` and `httpcore` were
dead properties.
Log4j is a library: Maven consults the `dependencyManagement` of the
project being built only, so managed versions inherited from
`log4j-parent` are never applied while resolving the transitive
dependencies of a Log4j module in a user's application. The pins only
changed the versions our own build resolved. Only `byte-buddy` stays
pinned, because AssertJ and Mockito request different versions and the
rule fails without it.
Co-Authored-By: Claude Fable 5.1 <[email protected]>
Claude-Session: https://claude.ai/code/session_01PC8EJFvX7V8HzF2F6Z3h96
* fix: AI unnecessary changes
---------
Co-authored-by: Claude Fable 5.1 <[email protected]>
---
log4j-parent/pom.xml | 54 +---------------------------------------------------
1 file changed, 1 insertion(+), 53 deletions(-)
diff --git a/log4j-parent/pom.xml b/log4j-parent/pom.xml
index 3875cd61bc..956a9adb41 100644
--- a/log4j-parent/pom.xml
+++ b/log4j-parent/pom.xml
@@ -106,7 +106,6 @@
<embedded-ldap.version>0.9.0</embedded-ldap.version>
<felix.version>7.0.5</felix.version>
<groovy.version>4.0.27</groovy.version>
- <guava.version>33.4.8-jre</guava.version>
<h2.version>2.3.232</h2.version>
<hamcrest.version>3.0</hamcrest.version>
<HdrHistogram.version>2.2.2</HdrHistogram.version>
@@ -127,7 +126,6 @@
<junit-pioneer.version>2.3.0</junit-pioneer.version>
<log4j2-custom-layout.version>1.1.0</log4j2-custom-layout.version>
<log4j2-logstash-layout.version>0.18</log4j2-logstash-layout.version>
- <maven.version>3.9.10</maven.version>
<mockito.version>5.18.0</mockito.version>
<nashorn.version>15.6</nashorn.version>
<opentest4j.version>1.3.0</opentest4j.version>
@@ -139,7 +137,6 @@
<osgi.annotation.bundle.version>2.0.0</osgi.annotation.bundle.version>
<osgi.annotation.versioning.version>1.1.2</osgi.annotation.versioning.version>
<pax-exam.version>4.14.0</pax-exam.version>
- <plexus-utils.version>3.6.0</plexus-utils.version>
<spotbugs-annotations.version>4.9.3</spotbugs-annotations.version>
<system-stubs.version>2.1.8</system-stubs.version>
<velocity.version>1.7</velocity.version>
@@ -152,13 +149,8 @@
the independence of transitive dependencies from the order
of dependencies (requireUpperBoundDeps rule).
===================================================== -->
- <asm.version>9.6</asm.version>
+ <!-- AssertJ and Mockito request different versions -->
<byte-buddy.version>1.17.6</byte-buddy.version>
- <commons-pool2.version>2.12.1</commons-pool2.version>
- <httpclient.version>4.5.14</httpclient.version>
- <httpcore.version>4.4.16</httpcore.version>
- <jna.version>5.17.0</jna.version>
-
</properties>
<dependencyManagement>
@@ -280,12 +272,6 @@
<version>${commons-lang3.version}</version>
</dependency>
- <dependency>
- <groupId>org.apache.commons</groupId>
- <artifactId>commons-pool2</artifactId>
- <version>${commons-pool2.version}</version>
- </dependency>
-
<dependency>
<groupId>com.lmax</groupId>
<artifactId>disruptor</artifactId>
@@ -298,20 +284,6 @@
<version>${embedded-ldap.version}</version>
</dependency>
- <!-- Transitive dependency: setting upper bound of declared versions -->
- <dependency>
- <groupId>com.google.guava</groupId>
- <artifactId>guava</artifactId>
- <version>${guava.version}</version>
- </dependency>
-
- <dependency>
- <groupId>com.google.guava</groupId>
- <!--
https://javadoc.io/doc/com.google.guava/guava-testlib/latest/com/google/common/testing/TestLogHandler.html
used in log4j-to-jul tests -->
- <artifactId>guava-testlib</artifactId>
- <version>${guava.version}</version>
- </dependency>
-
<dependency>
<groupId>com.h2database</groupId>
<artifactId>h2</artifactId>
@@ -387,12 +359,6 @@
<version>${jmh.version}</version>
</dependency>
- <dependency>
- <groupId>net.java.dev.jna</groupId>
- <artifactId>jna</artifactId>
- <version>${jna.version}</version>
- </dependency>
-
<dependency>
<groupId>net.javacrumbs.json-unit</groupId>
<artifactId>json-unit</artifactId>
@@ -437,18 +403,6 @@
<version>${log4j2-logstash-layout.version}</version>
</dependency>
- <dependency>
- <groupId>org.apache.maven</groupId>
- <artifactId>maven-core</artifactId>
- <version>${maven.version}</version>
- </dependency>
-
- <dependency>
- <groupId>org.apache.maven</groupId>
- <artifactId>maven-model</artifactId>
- <version>${maven.version}</version>
- </dependency>
-
<dependency>
<groupId>org.openjdk.nashorn</groupId>
<artifactId>nashorn-core</artifactId>
@@ -521,12 +475,6 @@
<version>${pax-exam.version}</version>
</dependency>
- <dependency>
- <groupId>org.codehaus.plexus</groupId>
- <artifactId>plexus-utils</artifactId>
- <version>${plexus-utils.version}</version>
- </dependency>
-
<dependency>
<groupId>uk.org.webcompere</groupId>
<artifactId>system-stubs-core</artifactId>
