This is an automated email from the ASF dual-hosted git repository.

rzo1 pushed a commit to branch tomee-10.x
in repository https://gitbox.apache.org/repos/asf/tomee.git

commit 2c47a16d67513752e9309612dce2966bdd6bf2c8
Author: Richard Zowalla <[email protected]>
AuthorDate: Sun Sep 20 19:52:11 2026 +0200

    replace the EOL log4j 1.2.17 with reload4j
    
    log4j 1.x reached end of life in 2015 and the remaining advisories against
    1.2.17 have no fixed release. reload4j is the maintained fork: it keeps the
    org.apache.log4j API and package names, so it is a drop-in replacement.
    
    The dependency is provided scope and no distribution ships it. TomEE only
    compiles against it for the optional log4j 1.x integration that
    openejb.log.factory=log4j and =pax select, and both keep working. Migrating
    those paths to Log4j 2 would also retire the pax option, since Pax Logging
    exposes the log4j 1.x API itself, so that is left for its own change.
    
    openejb-core, tomee-loader and tomee-juli compile unchanged against it.
    Besides the compiled references, Log4jLogger reads Level.TRACE by
    reflection and ServiceLogger loads org.apache.log4j.MDC by name; reload4j
    provides both.
    
    (cherry picked from commit ea820f705ab9e6af0eadb5a916b3e32fc6743443)
---
 arquillian/arquillian-tomee-moviefun-example/pom.xml | 4 ++--
 container/openejb-core/pom.xml                       | 4 ++--
 pom.xml                                              | 9 +++++----
 tomee/tomee-juli/pom.xml                             | 4 ++--
 tomee/tomee-loader/pom.xml                           | 4 ++--
 utils/openejb-core-hibernate/pom.xml                 | 6 +++---
 6 files changed, 16 insertions(+), 15 deletions(-)

diff --git a/arquillian/arquillian-tomee-moviefun-example/pom.xml 
b/arquillian/arquillian-tomee-moviefun-example/pom.xml
index 46c8283e1d..1527a81174 100644
--- a/arquillian/arquillian-tomee-moviefun-example/pom.xml
+++ b/arquillian/arquillian-tomee-moviefun-example/pom.xml
@@ -244,8 +244,8 @@
       <version>${version.shrinkwrap.descriptor}</version>
     </dependency>
     <dependency>
-      <groupId>log4j</groupId>
-      <artifactId>log4j</artifactId>
+      <groupId>ch.qos.reload4j</groupId>
+      <artifactId>reload4j</artifactId>
     </dependency>
     <dependency>
       <groupId>${project.groupId}</groupId>
diff --git a/container/openejb-core/pom.xml b/container/openejb-core/pom.xml
index d54685fd9f..e25643528c 100644
--- a/container/openejb-core/pom.xml
+++ b/container/openejb-core/pom.xml
@@ -447,8 +447,8 @@
     </dependency>
 
     <dependency>
-      <groupId>log4j</groupId>
-      <artifactId>log4j</artifactId>
+      <groupId>ch.qos.reload4j</groupId>
+      <artifactId>reload4j</artifactId>
       <scope>provided</scope>
     </dependency>
     <dependency>
diff --git a/pom.xml b/pom.xml
index 4c37b8a60d..22cff4d842 100644
--- a/pom.xml
+++ b/pom.xml
@@ -147,7 +147,8 @@
 
     <!-- Logging frameworks -->
     <version.slf4j>2.0.20</version.slf4j>
-    <version.log4j>1.2.17</version.log4j>
+    <!-- reload4j is the maintained fork of the EOL log4j 1.x, same 
org.apache.log4j API -->
+    <version.reload4j>1.2.26</version.reload4j>
     <version.log4j2>2.26.1</version.log4j2>
     <version.commons-logging>1.4.0</version.commons-logging>
 
@@ -1544,9 +1545,9 @@
         </exclusions>
       </dependency>
       <dependency>
-        <groupId>log4j</groupId>
-        <artifactId>log4j</artifactId>
-        <version>${version.log4j}</version>
+        <groupId>ch.qos.reload4j</groupId>
+        <artifactId>reload4j</artifactId>
+        <version>${version.reload4j}</version>
       </dependency>
       <dependency>
         <groupId>commons-codec</groupId>
diff --git a/tomee/tomee-juli/pom.xml b/tomee/tomee-juli/pom.xml
index 0aa9848805..ab99ededc5 100644
--- a/tomee/tomee-juli/pom.xml
+++ b/tomee/tomee-juli/pom.xml
@@ -35,8 +35,8 @@
       <optional>true</optional>
     </dependency>
     <dependency>
-      <groupId>log4j</groupId>
-      <artifactId>log4j</artifactId>
+      <groupId>ch.qos.reload4j</groupId>
+      <artifactId>reload4j</artifactId>
       <scope>provided</scope>
     </dependency>
     <dependency>
diff --git a/tomee/tomee-loader/pom.xml b/tomee/tomee-loader/pom.xml
index 23dd65a327..f9dce6f05e 100644
--- a/tomee/tomee-loader/pom.xml
+++ b/tomee/tomee-loader/pom.xml
@@ -83,8 +83,8 @@
     </dependency>
 
     <dependency>
-      <groupId>log4j</groupId>
-      <artifactId>log4j</artifactId>
+      <groupId>ch.qos.reload4j</groupId>
+      <artifactId>reload4j</artifactId>
       <scope>provided</scope>
     </dependency>
     <dependency>
diff --git a/utils/openejb-core-hibernate/pom.xml 
b/utils/openejb-core-hibernate/pom.xml
index c741b19569..47330bd697 100644
--- a/utils/openejb-core-hibernate/pom.xml
+++ b/utils/openejb-core-hibernate/pom.xml
@@ -128,9 +128,9 @@
       <version>${version.slf4j}</version>
     </dependency>
     <dependency>
-      <groupId>log4j</groupId>
-      <artifactId>log4j</artifactId>
-      <version>${version.log4j}</version>
+      <groupId>ch.qos.reload4j</groupId>
+      <artifactId>reload4j</artifactId>
+      <version>${version.reload4j}</version>
     </dependency>
     -->
   </dependencies>

Reply via email to