[LOG4J2-3675] org.springframework:spring-test promoted to non-test dependency

• Type: Bug
• Status: Resolved
• Priority: Major
• Resolution: Fixed
• Affects Version/s: 2.21.0
• Component/s: Build
• Assignee: Unassigned
• Reporter: Michael Blow
• Created: 25/Oct/23 00:14
• Updated: 25/Oct/23 10:34
• Resolved: 25/Oct/23 10:34

Description

This commit changed the scope of the org.springframework:spring-test dependency from test to the default (compile) scope, in several modules (e.g. log4j-web/pom.xml). Assuming this was not intentional, it should be fixed to no longer pull test dependencies in at runtime.

e.g.

$ mvn -f log4j-web-2.21.1.pom dependency:tree -Dscope=runtime
[INFO] Scanning for projects...
[INFO] 
[INFO] -----------------< org.apache.logging.log4j:log4j-web >-----------------
[INFO] Building Apache Log4j Web 2.21.1
[INFO] --------------------------------[ jar ]---------------------------------
[INFO] 
[INFO] --- maven-dependency-plugin:3.6.0:tree (default-cli) @ log4j-web ---
[INFO] org.apache.logging.log4j:log4j-web:jar:2.21.1
[INFO] +- org.apache.logging.log4j:log4j-api:jar:2.21.1:compile
[INFO] +- org.apache.logging.log4j:log4j-core:jar:2.21.1:compile
[INFO] \- org.springframework:spring-test:jar:5.3.29:compile
[INFO]    \- org.springframework:spring-core:jar:5.3.29:compile
[INFO] ------------------------------------------------------------------------
[INFO] BUILD SUCCESS
[INFO] ------------------------------------------------------------------------
[INFO] Total time:  1.246 s
[INFO] Finished at: 2023-10-24T20:13:08-04:00
[INFO] ------------------------------------------------------------------------

Note, I encountered this in the 2.21.1 release, but that doesn't exist in Jira so I selected 2.21.0.