By the way, for instance I would certainly not use the POI bundle at all: just ship POI as private of my bundle using it. It would be my preferred approach.
Regards JB On Mon, Oct 3, 2022 at 9:41 AM Antoine DESSAIGNE <antoine.dessai...@gmail.com> wrote: > > Hello JB, > > I just had a look at the staging bundle for POI : > https://repository.apache.org/content/repositories/orgapacheservicemix-1297/org/apache/servicemix/bundles/org.apache.servicemix.bundles.poi/5.2.3_1/org.apache.servicemix.bundles.poi-5.2.3_1.jar > > And I think it contains shaded jars it shouldn't > * commons-codec 1.15 (already an OSGi bundle) > * commons-io 2.11.0 (already an OSGi bundle) > * commons-math3 3.6.1 (already an OSGi bundle) > * commons-collections4 4.4 (already an OSGi bundle) > * xmlbeans 5.1.1, there's a org.apache.servicemix.bundles.xmlbeans for > 5.1.0_1 > > Tell me how we can help. Thank you. > > Have a nice day, > > Antoine > > Le ven. 30 sept. 2022 à 05:55, Jean-Baptiste Onofré <j...@nanthrax.net> a > écrit : > > > Hi Antoine, > > > > I don't see log4j2 included in the latest POI 5.2.3 bundle I did. > > It's excluded from the shade config. > > > > So I think we are already good for the next release cycle. > > > > Regards > > JB > > > > On Thu, Sep 29, 2022 at 1:41 PM Antoine DESSAIGNE > > <antoine.dessai...@gmail.com> wrote: > > > > > > Hello everybody, > > > > > > I just noticed that the latest Apache POI bundle of service mix inlines a > > > lot of libraries including Log4j2. Therefore when using POI there's an > > > error message telling that Log4j2 is not configured because there are 2 > > > log4j2 : one inside the bundle and one outside (this one is configured) > > > > > > Is it possible to exclude log4j2 from the poi bundle? maybe there are > > other > > > libraries that shouldn't be included in the bundle like commons-codec, > > > commons-collection4, commons-io and commons-math3. What do you think? > > > > > > Thank you very much > > > > > > Antoine > >
