https://issues.apache.org/bugzilla/show_bug.cgi?id=48527
Summary: maven metadata is out of date
Product: Log4j
Version: 1.2
Platform: Other
OS/Version: Linux
Status: NEW
Severity: major
Priority: P2
Component: Other
AssignedTo: [email protected]
ReportedBy: [email protected]
http://repo1.maven.org/maven2/log4j/log4j/maven-metadata.xml lists log4j
versions up to 1.2.13, although versions .14 and .15 are available in that same
repo.
This means that hard dependencies and range dependencies do not work, as maven
does not pick up these versions. So you have to stick to soft dependencies or
use the out of date versions.
In other words - this (soft dep) works:
<dependency>
<artifactId>log4j</artifactId>
<version>1.2.14</version>
...
this (hard dep) does not:
<dependency>
<artifactId>log4j</artifactId>
<version>[1.2.14]</version>
nor does this (range dep):
<dependency>
<artifactId>log4j</artifactId>
<version>[1.2.14,2.0)</version>
Unfortunately, soft dependencies can cause a lot of problems, especially in
larger setups, that are not detected at deploy time, but only at run time
(MethodNotFoundError and others). But you cannot really use hard / range
dependencies with incomplete metadata, as maven will not find undeclared
versions.
Btw, isn't this metadata file something that would be auto-generated?
--
Configure bugmail: https://issues.apache.org/bugzilla/userprefs.cgi?tab=email
------- You are receiving this mail because: -------
You are the assignee for the bug.
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
