root
/
kafka
mirror of https://github.com/apache/kafka.git
1
0
Fork 0
Code Issues Actions 2 Packages Projects Releases Wiki Activity

KAFKA-13660: Switch log4j12 to reload4j (#11743) 

This bumps the slf4j version to 1.7.36 and swaps out log4j 1.2.17 with
reload4j 1.2.19

Signed-off-by: Mike Lothian <mike@fireburn.co.uk>

Reviewers: Luke Chen <showuon@gmail.com>, Ismael Juma <ismael@juma.me.uk>, Bruno Cadonna <cadonna@apache.org>
This commit is contained in:
Mike Lothian 2022-03-30 19:54:01 +01:00 committed by GitHub
parent 76ca62a396
commit ecb0e8eece
No known key found for this signature in database
GPG Key ID: 4AEE18F83AFDEB23
4 changed files with 9 additions and 6 deletions
Show Stats Download Patch File Download Diff File Expand all files Collapse all files

6
LICENSE-binary
View File

@ -233,7 +233,6 @@ jetty-util-ajax-9.4.43.v20210629
jersey-common-2.34
jersey-server-2.34
jose4j-0.7.8
log4j-1.2.17
lz4-java-1.8.0
maven-artifact-3.8.1
metrics-core-4.1.12.1
@ -246,6 +245,7 @@ netty-transport-4.1.68.Final
netty-transport-native-epoll-4.1.68.Final
netty-transport-native-unix-common-4.1.68.Final
plexus-utils-3.2.1
reload4j-1.2.19
rocksdbjni-6.22.1.1
scala-collection-compat_2.13-2.4.4
scala-library-2.13.6
@ -300,8 +300,8 @@ MIT License
argparse4j-0.7.0, see: licenses/argparse-MIT
jopt-simple-5.0.4, see: licenses/jopt-simple-MIT
slf4j-api-1.7.30, see: licenses/slf4j-MIT
slf4j-log4j12-1.7.30, see: licenses/slf4j-MIT
slf4j-api-1.7.36, see: licenses/slf4j-MIT
slf4j-reload4j-1.7.36, see: licenses/slf4j-MIT
---------------------------------------
BSD 2-Clause

1
build.gradle
View File

@ -149,6 +149,7 @@ allprojects {
}
}
}
task printAllDependencies(type: DependencyReportTask) {}
}
def determineCommitId() {

2
docs/upgrade.html
View File

@ -30,6 +30,8 @@
Users can change this behavior to enable idempotence for some or all producers
via Connect worker and/or connector configuration. Connect may enable idempotent producers
by default in a future major release.</li>
<li>Kafka has replaced log4j and slf4j-log4j12 with reload4j and slf4j-reload4j due to security concerns.
More information can be found at <a href"https://reload4j.qos.ch">reload4j</a>.</li>
</ul>
<h4><a id="upgrade_3_1_0" href="#upgrade_3_1_0">Upgrading to 3.1.0 from any version 0.8.x through 3.0.x</a></h4>

6
gradle/dependencies.gradle
View File

@ -75,7 +75,6 @@ versions += [
jline: "3.21.0",
jmh: "1.34",
hamcrest: "2.2",
log4j: "1.2.17",
scalaLogging: "3.9.4",
jaxb: "2.3.0",
jaxrs: "2.1.1",
@ -108,12 +107,13 @@ versions += [
netty: "4.1.73.Final",
powermock: "2.0.9",
reflections: "0.9.12",
reload4j: "1.2.19",
rocksDB: "6.29.4.1",
scalaCollectionCompat: "2.6.0",
scalafmt: "2.7.5",
scalaJava8Compat : "1.0.2",
scoverage: "1.4.11",
slf4j: "1.7.32",
slf4j: "1.7.36",
snappy: "1.1.8.4",
spotbugs: "4.2.2",
zinc: "1.3.5",
@ -178,7 +178,7 @@ libs += [
kafkaStreams_28: "org.apache.kafka:kafka-streams:$versions.kafka_28",
kafkaStreams_30: "org.apache.kafka:kafka-streams:$versions.kafka_30",
kafkaStreams_31: "org.apache.kafka:kafka-streams:$versions.kafka_31",
log4j: "log4j:log4j:$versions.log4j",
log4j: "ch.qos.reload4j:reload4j:$versions.reload4j",
lz4: "org.lz4:lz4-java:$versions.lz4",
metrics: "com.yammer.metrics:metrics-core:$versions.metrics",
dropwizardMetrics: "io.dropwizard.metrics:metrics-core:$versions.dropwizardMetrics",