[ANY23-585] CLONE - Bump log4j2.version from 2.17.1 to 2.17.2

• Type: Improvement
• Status: Resolved
• Priority: Major
• Resolution: Won't Fix
• Affects Version/s: 2.8
• Fix Version/s: 2.8
• Component/s: build, dependabot, dependency
• Docs Text: Star

Language

English

• Assignee: Lewis John McGibbney
• Reporter: Sajid Sajid (Inactive)
• Created: 05/Apr/22 14:12
• Updated: 12/Apr/22 16:08
• Resolved: 12/Apr/22 16:08

Description

https://github.com/apache/any23/pull/266

There are however dependency convergence errors.

Warning:
Dependency convergence error for org.apache.logging.log4j:log4j-api:jar:2.17.1:compile paths to dependency are:
+-org.apache.any23:apache-any23-mime:jar:2.8-SNAPSHOT
+-org.apache.tika:tika-parsers-standard-package:jar:2.3.0:compile
+-org.apache.tika:tika-parser-cad-module:jar:2.3.0:compile
+-org.apache.poi:poi:jar:5.2.0:compile
+-org.apache.logging.log4j:log4j-api:jar:2.17.1:compile
and
+-org.apache.any23:apache-any23-mime:jar:2.8-SNAPSHOT
+-org.apache.tika:tika-parsers-standard-package:jar:2.3.0:compile
+-org.apache.tika:tika-parser-microsoft-module:jar:2.3.0:compile
+-org.apache.poi:poi-scratchpad:jar:5.2.0:compile
+-org.apache.logging.log4j:log4j-api:jar:2.17.1:compile
and
+-org.apache.any23:apache-any23-mime:jar:2.8-SNAPSHOT
+-org.apache.tika:tika-parsers-standard-package:jar:2.3.0:compile
+-org.apache.tika:tika-parser-microsoft-module:jar:2.3.0:compile
+-org.apache.poi:poi-ooxml:jar:5.2.0:compile
+-org.apache.xmlbeans:xmlbeans:jar:5.0.3:compile
+-org.apache.logging.log4j:log4j-api:jar:2.17.1:compile
and
+-org.apache.any23:apache-any23-mime:jar:2.8-SNAPSHOT
+-org.apache.tika:tika-parsers-standard-package:jar:2.3.0:compile
+-org.apache.tika:tika-parser-microsoft-module:jar:2.3.0:compile
+-org.apache.poi:poi-ooxml:jar:5.2.0:compile
+-org.apache.logging.log4j:log4j-api:jar:2.17.1:compile
and
+-org.apache.any23:apache-any23-mime:jar:2.8-SNAPSHOT
+-org.apache.logging.log4j:log4j-core:jar:2.17.2:compile
+-org.apache.logging.log4j:log4j-api:jar:2.17.2:compile
and
+-org.apache.any23:apache-any23-mime:jar:2.8-SNAPSHOT
+-org.apache.logging.log4j:log4j-slf4j-impl:jar:2.17.2:compile
+-org.apache.logging.log4j:log4j-api:jar:2.17.2:compile

Warning: Rule 0: org.apache.maven.plugins.enforcer.DependencyConvergence failed with message:
Failed while enforcing releasability. See above detailed error message.

Issue Links

• is a clone of: ANY23-577 Bump log4j2.version from 2.17.1 to 2.17.2