Skip to content

Commit 42b06cf

Browse files
committed
Prevent maven plugins from using log4j:log4j
1 parent e772728 commit 42b06cf

File tree

1 file changed

+62
-0
lines changed

1 file changed

+62
-0
lines changed

pom.xml

Lines changed: 62 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -845,6 +845,45 @@
845845
<groupId>org.apache.maven.plugins</groupId>
846846
<artifactId>maven-dependency-plugin</artifactId>
847847
<version>${version.maven-dependency-plugin}</version>
848+
<dependencies>
849+
<dependency>
850+
<groupId>org.apache.commons</groupId>
851+
<artifactId>commons-lang3</artifactId>
852+
<version>${version.commons-lang3}</version>
853+
</dependency>
854+
<dependency>
855+
<groupId>org.apache.logging.log4j</groupId>
856+
<artifactId>log4j-1.2-api</artifactId>
857+
<version>${version.log4j2}</version>
858+
</dependency>
859+
<dependency>
860+
<groupId>org.apache.logging.log4j</groupId>
861+
<artifactId>log4j-core</artifactId>
862+
<version>${version.log4j2}</version>
863+
</dependency>
864+
<dependency>
865+
<groupId>org.apache.maven.doxia</groupId>
866+
<artifactId>doxia-site-renderer</artifactId>
867+
<version>1.4</version>
868+
<exclusions>
869+
<exclusion>
870+
<groupId>log4j</groupId>
871+
<artifactId>log4j</artifactId>
872+
</exclusion>
873+
</exclusions>
874+
</dependency>
875+
<dependency>
876+
<groupId>org.apache.maven.reporting</groupId>
877+
<artifactId>maven-reporting-impl</artifactId>
878+
<version>3.0.0</version>
879+
<exclusions>
880+
<exclusion>
881+
<groupId>log4j</groupId>
882+
<artifactId>log4j</artifactId>
883+
</exclusion>
884+
</exclusions>
885+
</dependency>
886+
</dependencies>
848887
</plugin>
849888
<plugin>
850889
<groupId>org.apache.maven.plugins</groupId>
@@ -969,6 +1008,29 @@
9691008
<threshold>Medium</threshold>
9701009
<xmlOutput>true</xmlOutput>
9711010
</configuration>
1011+
<dependencies>
1012+
<dependency>
1013+
<groupId>org.apache.logging.log4j</groupId>
1014+
<artifactId>log4j-1.2-api</artifactId>
1015+
<version>${version.log4j2}</version>
1016+
</dependency>
1017+
<dependency>
1018+
<groupId>org.apache.logging.log4j</groupId>
1019+
<artifactId>log4j-core</artifactId>
1020+
<version>${version.log4j2}</version>
1021+
</dependency>
1022+
<dependency>
1023+
<groupId>org.apache.maven.reporting</groupId>
1024+
<artifactId>maven-reporting-impl</artifactId>
1025+
<version>3.0.0</version>
1026+
<exclusions>
1027+
<exclusion>
1028+
<groupId>log4j</groupId>
1029+
<artifactId>log4j</artifactId>
1030+
</exclusion>
1031+
</exclusions>
1032+
</dependency>
1033+
</dependencies>
9721034
</plugin>
9731035
<plugin>
9741036
<groupId>org.jacoco</groupId>

0 commit comments

Comments
 (0)