[jira] [Created] (NIFI-9579) swagger-maven-plugin depends on log4j. Use newer one (when made available)

["Nissim Shiman (Jira)" <ji...@apache.org>]

Nissim Shiman created NIFI-9579:
-----------------------------------

             Summary: swagger-maven-plugin depends on log4j.  Use newer one (when made available)
                 Key: NIFI-9579
                 URL: https://issues.apache.org/jira/browse/NIFI-9579
             Project: Apache NiFi
          Issue Type: Bug
    Affects Versions: 1.15.2
            Reporter: Nissim Shiman


Note: This only affects nifi dev environments - not the apache nifi product.

At the moment building apache nifi will result in log4j-1.2.16.jar in one's maven local repo.

This is due to swagger-maven-plugins which pulls these in when used [1] [2] 

swagger-maven-plugin is know to have this dependency but it is unclear how soon this will be acted on
[3] .  When swagger-maven-plugin has this resolved, update to new version.

 

[1] [https://github.com/apache/nifi/blob/rel/nifi-1.15.2/nifi-nar-bundles/nifi-framework-bundle/nifi-framework/nifi-web/nifi-web-api/pom.xml#L60-L62|https://github.com/apache/nifi/blob/rel/nifi-1.15.2/nifi-nar-bundles/nifi-framework-bundle/nifi-framework/nifi-web/nifi-web-api/pom.xml#L61-L62]
[2] 
[https://github.com/apache/nifi/blob/rel/nifi-1.15.2/nifi-registry/nifi-registry-core/nifi-registry-web-api/pom.xml#L55-L57]
[3] [https://github.com/kongchen/swagger-maven-plugin/issues/875]



--
This message was sent by Atlassian Jira
(v8.20.1#820001)