You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@kafka.apache.org by ca...@apache.org on 2022/06/02 12:04:41 UTC

[kafka] branch 3.1 updated: MINOR: Note that slf4j-log4j in version 1.7.35+ should be used (#12117)

This is an automated email from the ASF dual-hosted git repository.

cadonna pushed a commit to branch 3.1
in repository https://gitbox.apache.org/repos/asf/kafka.git


The following commit(s) were added to refs/heads/3.1 by this push:
     new 2723f06182 MINOR: Note that slf4j-log4j in version 1.7.35+ should be used (#12117)
2723f06182 is described below

commit 2723f06182c3d845433293309ceb3365a15d4a6d
Author: Bruno Cadonna <ca...@apache.org>
AuthorDate: Thu Jun 2 14:04:16 2022 +0200

    MINOR: Note that slf4j-log4j in version 1.7.35+ should be used (#12117)
    
    Adds a note to the upgrade notes to use slf4j-log4j version
    1.7.35+ [1] or slf4j-reload4j to avoid possible compatibility issues
    originating from the logging framework [2].
    
    [1] https://www.slf4j.org/manual.html#swapping
    [2] https://www.slf4j.org/codes.html#no_tlm
    
    Reviewer: Tom Bentley <tb...@redhat.com>
---
 docs/upgrade.html | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/docs/upgrade.html b/docs/upgrade.html
index 6575275d6a..d974b8abd9 100644
--- a/docs/upgrade.html
+++ b/docs/upgrade.html
@@ -73,7 +73,13 @@
         via Connect worker and/or connector configuration. Connect may enable idempotent producers
         by default in a future major release.</li>
     <li>Kafka has replaced log4j and slf4j-log4j12 with reload4j and slf4j-reload4j due to security concerns.
-        More information can be found at <a href"https://reload4j.qos.ch">reload4j</a>.</li>
+        This only affects modules that specify a logging backend (<code>connect-runtime</code> and <code>kafka-tools</code> are two such examples).
+        A number of modules, including <code>kafka-clients</code>, leave it to the application to specify the logging backend.
+        More information can be found at <a href"https://reload4j.qos.ch">reload4j</a>.
+        Projects that depend on the affected modules from the Kafka project should use
+        <a href="https://www.slf4j.org/manual.html#swapping">slf4j-log4j12 version 1.7.35 or above</a> or
+        slf4j-reload4j to avoid
+        <a href="https://www.slf4j.org/codes.html#no_tlm">possible compatibility issues originating from the logging framework</a>.</li>
     <li>The example connectors, <code>FileStreamSourceConnector</code> and <code>FileStreamSinkConnector</code>, have been 
         removed from the default classpath. To use them in Kafka Connect standalone or distributed mode they need to be 
         explicitly added, for example <code>CLASSPATH=./libs/connect-file-3.1.1.jar ./bin/connect-distributed.sh</code>.</li>