This is an automated email from the ASF dual-hosted git repository. rzo1 pushed a commit to branch main in repository https://gitbox.apache.org/repos/asf/tomee.git
commit ea820f705ab9e6af0eadb5a916b3e32fc6743443 Author: Richard Zowalla <[email protected]> AuthorDate: Sun Sep 20 19:52:11 2026 +0200 replace the EOL log4j 1.2.17 with reload4j log4j 1.x reached end of life in 2015 and the remaining advisories against 1.2.17 have no fixed release. reload4j is the maintained fork: it keeps the org.apache.log4j API and package names, so it is a drop-in replacement. The dependency is provided scope and no distribution ships it. TomEE only compiles against it for the optional log4j 1.x integration that openejb.log.factory=log4j and =pax select, and both keep working. Migrating those paths to Log4j 2 would also retire the pax option, since Pax Logging exposes the log4j 1.x API itself, so that is left for its own change. openejb-core, tomee-loader and tomee-juli compile unchanged against it. Besides the compiled references, Log4jLogger reads Level.TRACE by reflection and ServiceLogger loads org.apache.log4j.MDC by name; reload4j provides both. --- container/openejb-core/pom.xml | 4 ++-- pom.xml | 9 +++++---- tomee/tomee-juli/pom.xml | 4 ++-- tomee/tomee-loader/pom.xml | 4 ++-- utils/openejb-core-hibernate/pom.xml | 6 +++--- 5 files changed, 14 insertions(+), 13 deletions(-) diff --git a/container/openejb-core/pom.xml b/container/openejb-core/pom.xml index 056acedf09..03f79105c9 100644 --- a/container/openejb-core/pom.xml +++ b/container/openejb-core/pom.xml @@ -435,8 +435,8 @@ </dependency> <dependency> - <groupId>log4j</groupId> - <artifactId>log4j</artifactId> + <groupId>ch.qos.reload4j</groupId> + <artifactId>reload4j</artifactId> <scope>provided</scope> </dependency> <dependency> diff --git a/pom.xml b/pom.xml index 117d16ed01..c944056d9f 100644 --- a/pom.xml +++ b/pom.xml @@ -155,7 +155,8 @@ <!-- Logging frameworks --> <version.slf4j>2.0.18</version.slf4j> - <version.log4j>1.2.17</version.log4j> + <!-- reload4j is the maintained fork of the EOL log4j 1.x, same org.apache.log4j API --> + <version.reload4j>1.2.26</version.reload4j> <version.log4j2>2.26.1</version.log4j2> <version.commons-logging>1.4.0</version.commons-logging> @@ -1605,9 +1606,9 @@ </exclusions> </dependency> <dependency> - <groupId>log4j</groupId> - <artifactId>log4j</artifactId> - <version>${version.log4j}</version> + <groupId>ch.qos.reload4j</groupId> + <artifactId>reload4j</artifactId> + <version>${version.reload4j}</version> </dependency> <dependency> <groupId>commons-codec</groupId> diff --git a/tomee/tomee-juli/pom.xml b/tomee/tomee-juli/pom.xml index e89f997b73..df4755787a 100644 --- a/tomee/tomee-juli/pom.xml +++ b/tomee/tomee-juli/pom.xml @@ -35,8 +35,8 @@ <optional>true</optional> </dependency> <dependency> - <groupId>log4j</groupId> - <artifactId>log4j</artifactId> + <groupId>ch.qos.reload4j</groupId> + <artifactId>reload4j</artifactId> <scope>provided</scope> </dependency> <dependency> diff --git a/tomee/tomee-loader/pom.xml b/tomee/tomee-loader/pom.xml index 027f3df091..4855b2c662 100644 --- a/tomee/tomee-loader/pom.xml +++ b/tomee/tomee-loader/pom.xml @@ -83,8 +83,8 @@ </dependency> <dependency> - <groupId>log4j</groupId> - <artifactId>log4j</artifactId> + <groupId>ch.qos.reload4j</groupId> + <artifactId>reload4j</artifactId> <scope>provided</scope> </dependency> <dependency> diff --git a/utils/openejb-core-hibernate/pom.xml b/utils/openejb-core-hibernate/pom.xml index b86016d3a5..9a169f3f5d 100644 --- a/utils/openejb-core-hibernate/pom.xml +++ b/utils/openejb-core-hibernate/pom.xml @@ -128,9 +128,9 @@ <version>${version.slf4j}</version> </dependency> <dependency> - <groupId>log4j</groupId> - <artifactId>log4j</artifactId> - <version>${version.log4j}</version> + <groupId>ch.qos.reload4j</groupId> + <artifactId>reload4j</artifactId> + <version>${version.reload4j}</version> </dependency> --> </dependencies>
