[DATAFU-162] Upgrade Log4j version

• Type: Improvement
• Status: Closed
• Priority: Major
• Resolution: Fixed
• Fix Version/s: 1.7.0
• Labels: up-for-grabs

Language

gradle scala

• Assignee: Eyal Allweil
• Reporter: Eyal Allweil
• Created: 11/Jan/22 19:58
• Updated: 24/Jan/23 11:23
• Resolved: 12/Oct/22 08:21

Description

Although the infamous Log4J vulnerability is not relevant for DataFu (we are dependent on log4j 1.x, which is not affected) it is still a pretty good idea to upgrade to a new version.

The upgrade should keep our logs as similar as possible to the existing version, but this shouldn't necessitate a major version release since this isn't a breaking change.

 

We can start by fixing this for datafu-spark (we don't need to update the other projects since they might be deprecated soon)