Hi Antoine, I don't see log4j2 included in the latest POI 5.2.3 bundle I did. It's excluded from the shade config.
So I think we are already good for the next release cycle. Regards JB On Thu, Sep 29, 2022 at 1:41 PM Antoine DESSAIGNE <antoine.dessai...@gmail.com> wrote: > > Hello everybody, > > I just noticed that the latest Apache POI bundle of service mix inlines a > lot of libraries including Log4j2. Therefore when using POI there's an > error message telling that Log4j2 is not configured because there are 2 > log4j2 : one inside the bundle and one outside (this one is configured) > > Is it possible to exclude log4j2 from the poi bundle? maybe there are other > libraries that shouldn't be included in the bundle like commons-codec, > commons-collection4, commons-io and commons-math3. What do you think? > > Thank you very much > > Antoine