Hello JB,

I just had a look at the staging bundle for POI :
https://repository.apache.org/content/repositories/orgapacheservicemix-1297/org/apache/servicemix/bundles/org.apache.servicemix.bundles.poi/5.2.3_1/org.apache.servicemix.bundles.poi-5.2.3_1.jar

And I think it contains shaded jars it shouldn't
* commons-codec 1.15 (already an OSGi bundle)
* commons-io 2.11.0 (already an OSGi bundle)
* commons-math3 3.6.1 (already an OSGi bundle)
* commons-collections4 4.4 (already an OSGi bundle)
* xmlbeans 5.1.1, there's a org.apache.servicemix.bundles.xmlbeans for
5.1.0_1

Tell me how we can help. Thank you.

Have a nice day,

Antoine

Le ven. 30 sept. 2022 à 05:55, Jean-Baptiste Onofré <j...@nanthrax.net> a
écrit :

> Hi Antoine,
>
> I don't see log4j2 included in the latest POI 5.2.3 bundle I did.
> It's excluded from the shade config.
>
> So I think we are already good for the next release cycle.
>
> Regards
> JB
>
> On Thu, Sep 29, 2022 at 1:41 PM Antoine DESSAIGNE
> <antoine.dessai...@gmail.com> wrote:
> >
> > Hello everybody,
> >
> > I just noticed that the latest Apache POI bundle of service mix inlines a
> > lot of libraries including Log4j2. Therefore when using POI there's an
> > error message telling that Log4j2 is not configured because there are 2
> > log4j2 : one inside the bundle and one outside (this one is configured)
> >
> > Is it possible to exclude log4j2 from the poi bundle? maybe there are
> other
> > libraries that shouldn't be included in the bundle like commons-codec,
> > commons-collection4, commons-io and commons-math3. What do you think?
> >
> > Thank you very much
> >
> > Antoine
>

Reply via email to