gemmellr commented on pull request #754: URL: https://github.com/apache/activemq/pull/754#issuecomment-1030183499
I see a bunch: ``` $ mvn dependency:tree | grep log4j [INFO] | +- org.slf4j:slf4j-log4j12:jar:1.7.25:provided [INFO] | +- log4j:log4j:jar:1.2.17:provided [INFO] | +- org.slf4j:slf4j-log4j12:jar:1.7.25:provided [INFO] | +- log4j:log4j:jar:1.2.17:provided [INFO] | +- org.slf4j:slf4j-log4j12:jar:1.7.25:compile [INFO] | +- log4j:log4j:jar:1.2.17:compile [INFO] | +- org.slf4j:slf4j-log4j12:jar:1.7.25:compile [INFO] | +- log4j:log4j:jar:1.2.17:compile [INFO] | | +- org.slf4j:slf4j-log4j12:jar:1.7.25:test [INFO] | | +- log4j:log4j:jar:1.2.17:test [INFO] | | +- org.slf4j:slf4j-log4j12:jar:1.7.25:test [INFO] | | +- log4j:log4j:jar:1.2.17:test [INFO] ------------< org.apache.activemq:activemq-log4j-appender >------------- [INFO] --- maven-dependency-plugin:3.1.2:tree (default-cli) @ activemq-log4j-appender --- [INFO] org.apache.activemq:activemq-log4j-appender:jar:5.16.5-SNAPSHOT [INFO] +- org.apache.activemq:activemq-log4j-appender:jar:5.16.5-SNAPSHOT:compile [INFO] | | +- org.slf4j:slf4j-log4j12:jar:1.7.25:test [INFO] | | +- log4j:log4j:jar:1.2.17:test [INFO] | | +- org.slf4j:slf4j-log4j12:jar:1.7.25:test [INFO] | | +- log4j:log4j:jar:1.2.17:test [INFO] | +- org.slf4j:slf4j-log4j12:jar:1.7.25:compile [INFO] | +- log4j:log4j:jar:1.2.17:compile [INFO] | | +- org.slf4j:slf4j-log4j12:jar:1.7.25:test [INFO] | | +- log4j:log4j:jar:1.2.17:test [INFO] | | +- org.slf4j:slf4j-log4j12:jar:1.7.25:test [INFO] | | +- log4j:log4j:jar:1.2.17:test [INFO] | +- org.apache.activemq:activemq-log4j-appender:jar:5.16.5-SNAPSHOT:test [INFO] | | +- org.ops4j.pax.logging:pax-logging-log4j2:jar:1.11.9:test [INFO] | | +- org.slf4j:slf4j-log4j12:jar:1.7.25:test [INFO] | | +- log4j:log4j:jar:1.2.17:test [INFO] | +- org.slf4j:slf4j-log4j12:jar:1.7.25:compile [INFO] | +- log4j:log4j:jar:1.2.17:compile [INFO] +- org.apache.activemq:activemq-log4j-appender:jar:5.16.5-SNAPSHOT:compile [INFO] +- io.fabric8.insight:insight-log4j:jar:1.2.0.Beta4:compile ``` E.g the first is in the activemq-leveldb-store module: ``` <snipped> [INFO] +- org.apache.zookeeper:zookeeper:jar:3.4.14:provided [INFO] | +- org.slf4j:slf4j-log4j12:jar:1.7.25:provided [INFO] | +- com.github.spotbugs:spotbugs-annotations:jar:3.1.9:provided [INFO] | +- log4j:log4j:jar:1.2.17:provided [INFO] | +- jline:jline:jar:0.9.94:provided [INFO] | +- org.apache.yetus:audience-annotations:jar:0.5.0:provided [INFO] | \- io.netty:netty:jar:3.10.6.Final:provided ``` Its visible from the `mvn help:effective-pom` output for that module that it does have a dependency on zookeper 3.4.14 and does not exclude log4j or slf4j-log4j12 from it, and so is pulling them in since zookeper does depend on both: https://repo1.maven.org/maven2/org/apache/zookeeper/zookeeper/3.4.14/zookeeper-3.4.14.pom -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
