I committed the fix for log4j (thanks Enrico), however now we're seeing issues with jackson-databind again: https://issues.apache.org/jira/browse/ZOOKEEPER-3699 I don't think we're impacted (ehcache) but we should upgrade the library again.
Patrick On Wed, Jan 8, 2020 at 2:01 AM Enrico Olivelli <[email protected]> wrote: > The problem is about log4j server, we are not using it. > > This is my proposal, essentially to ignore the warning > https://github.com/apache/zookeeper/pull/1209 > > as pointed in your JIRA > https://issues.apache.org/jira/browse/ZOOKEEPER-3677 > > we should get aways from the old log4j and move to a modern library, > I feel it is better to defer to 3.7.0 > > Using slf4j the users will be free to use their own provider > > Enrico > > Il giorno mar 7 gen 2020 alle ore 18:25 Patrick Hunt <[email protected]> ha > scritto: > > > owasp is currently failing: > > > > https://issues.apache.org/jira/browse/ZOOKEEPER-3677 > > > > Patrick > > > > On Tue, Jan 7, 2020 at 8:48 AM Enrico Olivelli <[email protected]> > > wrote: > > > > > Hi, > > > I have deployed to https://repository.apache.org/snapshots/ a version > of > > > ZooKeeper built from branch-3.6. > > > > > > This way you can try it just by adding these lines to your pom.xml > > > > > > <repository> > > > <id>apache-snapshots</id> > > > <snapshots> > > > <enabled>true</enabled> > > > </snapshots> > > > <url>https://repository.apache.org/snapshots/</url> > > > </repository> > > > > > > We did the best to keep ZooKeeper 3.6.0 compatible with 3.5, but if you > > > have cycles to try your application with 3.6.0-SNAPSHOT this will help > a > > > lot in fixing problems before the official VOTE thread. > > > > > > We are still waiting for the last patch for 3.6.0....stay tuned > > > > > > Best regards > > > Enrico > > > > > >
