[JIRA] (JENKINS-60283) jenkins has a dependencies on both log4j:logj4 and org.slf4j:log4j-over-slf4j

2 views
Skip to first unread message

jnord@cloudbees.com (JIRA)

unread,
Nov 26, 2019, 8:03:02 AM11/26/19
to jenkinsc...@googlegroups.com
James Nord created an issue
 
Jenkins / Bug JENKINS-60283
jenkins has a dependencies on both log4j:logj4 and org.slf4j:log4j-over-slf4j
Issue Type: Bug Bug
Assignee: Unassigned
Components: core
Created: 2019-11-26 13:02
Priority: Minor Minor
Reporter: James Nord

log4j  is a dependency coming from 

 +- org.acegisecurity:acegi-security:jar:1.0.7:provided
 | +- org.springframework:spring-jdbc:jar:1.2.9:provided
 | | - org.springframework:spring-dao:jar:1.2.9:provided
 | +- oro:oro:jar:2.0.8:provided
 | - log4j:log4j:jar:1.2.17:provided

slf4j is used directly by Jenkins.

even though the scope is provided this causes duplicate entries on the compile classpath which causes issues when you are generating annimal sniffer annotations for example.

[ERROR] Failed to execute goal org.codehaus.mojo:animal-sniffer-maven-plugin:1.18:build (build) on project operations-center-jenkins-signature: A type incompatibility occurred while executing org.codehaus.mojo:animal-sniffer-maven-plugin:1.18:build: Cannot merger class org/apache/log4j/RollingFileAppender as it has changed superclass: 

the transitive dependency on log4j should be excluded

Add Comment Add Comment
 
This message was sent by Atlassian Jira (v7.13.6#713006-sha1:cc4451f)
Atlassian logo
Reply all
Reply to author
Forward
0 new messages