You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@tomee.apache.org by rz...@apache.org on 2026/09/20 18:02:56 UTC
(tomee) 01/03: replace the EOL log4j 1.2.17 with reload4j
This is an automated email from the ASF dual-hosted git repository.
rzo1 pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/tomee.git
commit ea820f705ab9e6af0eadb5a916b3e32fc6743443
Author: Richard Zowalla <rz...@apache.org>
AuthorDate: Sun Sep 20 19:52:11 2026 +0200
replace the EOL log4j 1.2.17 with reload4j
log4j 1.x reached end of life in 2015 and the remaining advisories against
1.2.17 have no fixed release. reload4j is the maintained fork: it keeps the
org.apache.log4j API and package names, so it is a drop-in replacement.
The dependency is provided scope and no distribution ships it. TomEE only
compiles against it for the optional log4j 1.x integration that
openejb.log.factory=log4j and =pax select, and both keep working. Migrating
those paths to Log4j 2 would also retire the pax option, since Pax Logging
exposes the log4j 1.x API itself, so that is left for its own change.
openejb-core, tomee-loader and tomee-juli compile unchanged against it.
Besides the compiled references, Log4jLogger reads Level.TRACE by
reflection and ServiceLogger loads org.apache.log4j.MDC by name; reload4j
provides both.
---
container/openejb-core/pom.xml | 4 ++--
pom.xml | 9 +++++----
tomee/tomee-juli/pom.xml | 4 ++--
tomee/tomee-loader/pom.xml | 4 ++--
utils/openejb-core-hibernate/pom.xml | 6 +++---
5 files changed, 14 insertions(+), 13 deletions(-)
diff --git a/container/openejb-core/pom.xml b/container/openejb-core/pom.xml
index 056acedf09..03f79105c9 100644
--- a/container/openejb-core/pom.xml
+++ b/container/openejb-core/pom.xml
@@ -435,8 +435,8 @@
</dependency>
<dependency>
- <groupId>log4j</groupId>
- <artifactId>log4j</artifactId>
+ <groupId>ch.qos.reload4j</groupId>
+ <artifactId>reload4j</artifactId>
<scope>provided</scope>
</dependency>
<dependency>
diff --git a/pom.xml b/pom.xml
index 117d16ed01..c944056d9f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -155,7 +155,8 @@
<!-- Logging frameworks -->
<version.slf4j>2.0.18</version.slf4j>
- <version.log4j>1.2.17</version.log4j>
+ <!-- reload4j is the maintained fork of the EOL log4j 1.x, same org.apache.log4j API -->
+ <version.reload4j>1.2.26</version.reload4j>
<version.log4j2>2.26.1</version.log4j2>
<version.commons-logging>1.4.0</version.commons-logging>
@@ -1605,9 +1606,9 @@
</exclusions>
</dependency>
<dependency>
- <groupId>log4j</groupId>
- <artifactId>log4j</artifactId>
- <version>${version.log4j}</version>
+ <groupId>ch.qos.reload4j</groupId>
+ <artifactId>reload4j</artifactId>
+ <version>${version.reload4j}</version>
</dependency>
<dependency>
<groupId>commons-codec</groupId>
diff --git a/tomee/tomee-juli/pom.xml b/tomee/tomee-juli/pom.xml
index e89f997b73..df4755787a 100644
--- a/tomee/tomee-juli/pom.xml
+++ b/tomee/tomee-juli/pom.xml
@@ -35,8 +35,8 @@
<optional>true</optional>
</dependency>
<dependency>
- <groupId>log4j</groupId>
- <artifactId>log4j</artifactId>
+ <groupId>ch.qos.reload4j</groupId>
+ <artifactId>reload4j</artifactId>
<scope>provided</scope>
</dependency>
<dependency>
diff --git a/tomee/tomee-loader/pom.xml b/tomee/tomee-loader/pom.xml
index 027f3df091..4855b2c662 100644
--- a/tomee/tomee-loader/pom.xml
+++ b/tomee/tomee-loader/pom.xml
@@ -83,8 +83,8 @@
</dependency>
<dependency>
- <groupId>log4j</groupId>
- <artifactId>log4j</artifactId>
+ <groupId>ch.qos.reload4j</groupId>
+ <artifactId>reload4j</artifactId>
<scope>provided</scope>
</dependency>
<dependency>
diff --git a/utils/openejb-core-hibernate/pom.xml b/utils/openejb-core-hibernate/pom.xml
index b86016d3a5..9a169f3f5d 100644
--- a/utils/openejb-core-hibernate/pom.xml
+++ b/utils/openejb-core-hibernate/pom.xml
@@ -128,9 +128,9 @@
<version>${version.slf4j}</version>
</dependency>
<dependency>
- <groupId>log4j</groupId>
- <artifactId>log4j</artifactId>
- <version>${version.log4j}</version>
+ <groupId>ch.qos.reload4j</groupId>
+ <artifactId>reload4j</artifactId>
+ <version>${version.reload4j}</version>
</dependency>
-->
</dependencies>