I would suggest that if you bump the logging parent to use it and then test Log4j with it and get a successful build then just do it. We don’t need to discuss stuff like this if it works.
Ralph > On Sep 17, 2022, at 2:54 PM, Piotr P. Karwasz <piotr.karw...@gmail.com> wrote: > > Hi all, > > More than 9 months have passed since the release of `logging-parent` > version 5. Since then `org.apache:apache` has done 3 releases. Can we > release version 6 of the artifact? > > I am mainly interested in the Maven plugin versions of > `org.apache:apache`, which should guarantee reproducible builds. > > Once `logging-parent` 6 is out I would delegate to `apache` the choice > of version of many Maven plugins: the bonus is, we don't get > Dependabot alerts for them. > > Piotr
