[
https://issues.apache.org/jira/browse/TIKA-3498?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17387416#comment-17387416
]
Tim Allison commented on TIKA-3498:
-----------------------------------
Looks like we were bundling log4j2 in the microsoft parsers module. :P Ugh.
Fixing that as well.
> Fix dependency convergence and other import issues in scientific vs standard
> package
> ------------------------------------------------------------------------------------
>
> Key: TIKA-3498
> URL: https://issues.apache.org/jira/browse/TIKA-3498
> Project: Tika
> Issue Type: Bug
> Reporter: Tim Allison
> Priority: Major
>
> [~dadoonet] found that there's a convergence error when users include both
> the tika-parsers-standard-package jar and tika-parser-scientific-module.
> {noformat}
> Dependency convergence error for org.slf4j:jcl-over-slf4j:1.7.31 paths to
> dependency are:
> +-org.example:tika-import-test:1.0-SNAPSHOT
> +-org.apache.tika:tika-parsers-standard-package:2.0.0
> +-org.slf4j:jcl-over-slf4j:1.7.31
> and
> +-org.example:tika-import-test:1.0-SNAPSHOT
> +-org.apache.tika:tika-parser-scientific-module:2.0.0
> +-edu.ucar:netcdf4:4.5.5
> +-edu.ucar:cdm:4.5.5
> +-org.slf4j:jcl-over-slf4j:1.7.7
> {noformat}
> [~dadoonet] also found that ucar's quartz dependency causes problems with CVE
> checkers. We should update that dependency as well.
--
This message was sent by Atlassian Jira
(v8.3.4#803005)
