From 6fb3af90b7b0ceb252f9c7373c789dd47ed0d933 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 9 Jan 2025 14:46:07 +0100 Subject: [PATCH] STORM-4144 - Bump slf4j.version from 1.7.36 to 2.0.16 (#3680) * Bump slf4j.version from 1.7.36 to 2.0.16 Bumps `slf4j.version` from 1.7.36 to 2.0.16. Updates `org.slf4j:slf4j-api` from 1.7.36 to 2.0.16 Updates `org.slf4j:slf4j-log4j12` from 1.7.36 to 2.0.16 Updates `org.slf4j:log4j-over-slf4j` from 1.7.36 to 2.0.16 Updates `org.slf4j:jcl-over-slf4j` from 1.7.36 to 2.0.16 Updates `org.slf4j:jul-to-slf4j` from 1.7.36 to 2.0.16 --- updated-dependencies: - dependency-name: org.slf4j:slf4j-api dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.slf4j:slf4j-log4j12 dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.slf4j:log4j-over-slf4j dependency-type: direct:development update-type: version-update:semver-major - dependency-name: org.slf4j:jcl-over-slf4j dependency-type: direct:production update-type: version-update:semver-major - dependency-name: org.slf4j:jul-to-slf4j dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] * slf4j2 fixes * license * slf4j2 fixes --------- Signed-off-by: dependabot[bot] Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Richard Zowalla --- DEPENDENCY-LICENSES | 10 +++++----- LICENSE-binary | 10 +++++----- external/storm-kafka-migration/pom.xml | 2 +- pom.xml | 2 +- storm-client/pom.xml | 2 +- storm-core/pom.xml | 2 +- storm-webapp/pom.xml | 2 +- 7 files changed, 15 insertions(+), 15 deletions(-) diff --git a/DEPENDENCY-LICENSES b/DEPENDENCY-LICENSES index adbf105550..18a599d9cf 100644 --- a/DEPENDENCY-LICENSES +++ b/DEPENDENCY-LICENSES @@ -16,7 +16,7 @@ List of third-party dependencies grouped by their license type. Apache License * carbonite (org.clojars.bipinprasad:carbonite:1.6.0 - https://github.com/bipinprasad/carbonite) - * Log4j Implemented Over SLF4J (org.slf4j:log4j-over-slf4j:1.7.36 - http://www.slf4j.org) + * Log4j Implemented Over SLF4J (org.slf4j:log4j-over-slf4j:2.0.16 - http://www.slf4j.org) Apache License, Version 2.0 @@ -148,7 +148,7 @@ List of third-party dependencies grouped by their license type. * javax.inject (javax.inject:javax.inject:1 - http://code.google.com/p/atinject/) * JBoss Logging 3 (org.jboss.logging:jboss-logging:3.6.0.Final - http://www.jboss.org) * JCIP Annotations under Apache License (com.github.stephenc.jcip:jcip-annotations:1.0-1 - http://stephenc.github.com/jcip-annotations) - * JCL 1.2 implemented over SLF4J (org.slf4j:jcl-over-slf4j:1.7.36 - http://www.slf4j.org) + * JCL 1.2 implemented over SLF4J (org.slf4j:jcl-over-slf4j:2.0.16 - http://www.slf4j.org) * jdependency (org.vafer:jdependency:2.10 - http://github.com/tcurdt/jdependency) * Jettison (org.codehaus.jettison:jettison:1.5.4 - https://github.com/jettison-json/jettison) * JSON Small and Fast Parser (net.minidev:json-smart:2.5.1 - https://urielch.github.io/) @@ -257,7 +257,7 @@ List of third-party dependencies grouped by their license type. * Prometheus Metrics Tracer OpenTelemetry (io.prometheus:prometheus-metrics-tracer-otel:1.3.5 - http://github.com/prometheus/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-otel) * Prometheus Metrics Tracer OpenTelemetry Agent (io.prometheus:prometheus-metrics-tracer-otel-agent:1.3.5 - http://github.com/prometheus/client_java/prometheus-metrics-tracer/prometheus-metrics-tracer-otel-agent) * sigar (org.fusesource:sigar:1.6.4 - http://fusesource.com/sigar/) - * SLF4J 1 Binding for Log4j API (org.apache.logging.log4j:log4j-slf4j-impl:2.24.3 - https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j-impl/) + * SLF4J 2 Provider for Log4j API (org.apache.logging.log4j:log4j-slf4j2-impl:2.24.3 - https://logging.apache.org/log4j/2.x/log4j/log4j-slf4j2-impl/) * SnakeYAML (org.yaml:snakeyaml:2.2 - https://bitbucket.org/snakeyaml/snakeyaml) * snappy-java (org.xerial.snappy:snappy-java:1.1.10.7 - https://github.com/xerial/snappy-java) * Spring AOP (org.springframework:spring-aop:5.3.27 - https://github.com/spring-projects/spring-framework) @@ -422,8 +422,8 @@ List of third-party dependencies grouped by their license type. * JCodings (org.jruby.jcodings:jcodings:1.0.58 - http://nexus.sonatype.org/oss-repository-hosting.html/jcodings) * Jedis (redis.clients:jedis:5.2.0 - https://github.com/redis/jedis) * Joni (org.jruby.joni:joni:2.2.1 - http://nexus.sonatype.org/oss-repository-hosting.html/joni) - * JUL to SLF4J bridge (org.slf4j:jul-to-slf4j:1.7.36 - http://www.slf4j.org) - * SLF4J API Module (org.slf4j:slf4j-api:1.7.36 - http://www.slf4j.org) + * JUL to SLF4J bridge (org.slf4j:jul-to-slf4j:2.0.16 - http://www.slf4j.org) + * SLF4J API Module (org.slf4j:slf4j-api:2.0.16 - http://www.slf4j.org) * System Out and Err redirected to SLF4J (uk.org.lidalia:sysout-over-slf4j:1.0.2 - http://projects.lidalia.org.uk/sysout-over-slf4j/) Public Domain diff --git a/LICENSE-binary b/LICENSE-binary index 9666cc9f4e..4651bf6ebd 100644 --- a/LICENSE-binary +++ b/LICENSE-binary @@ -665,7 +665,7 @@ The license texts of these dependencies can be found in the licenses directory. Apache License * carbonite (org.clojars.bipinprasad:carbonite:1.6.0 - https://github.com/bipinprasad/carbonite) - * Log4j Implemented Over SLF4J (org.slf4j:log4j-over-slf4j:1.7.36 - http://www.slf4j.org) + * Log4j Implemented Over SLF4J (org.slf4j:log4j-over-slf4j:2.0.16 - http://www.slf4j.org) Apache License, Version 2.0 @@ -709,7 +709,7 @@ The license texts of these dependencies can be found in the licenses directory. * Apache Kafka (org.apache.kafka:kafka-clients:3.9.0 - https://kafka.apache.org) * Apache Log4j API (org.apache.logging.log4j:log4j-api:2.24.3 - https://logging.apache.org/log4j/2.x/log4j-api/) * Apache Log4j Core (org.apache.logging.log4j:log4j-core:2.24.3 - https://logging.apache.org/log4j/2.x/log4j-core/) - * Apache Log4j SLF4J Binding (org.apache.logging.log4j:log4j-slf4j-impl:2.24.3 - https://logging.apache.org/log4j/2.x/log4j-slf4j-impl/) + * Apache Log4j SLF4J Binding (org.apache.logging.log4j:log4j-slf4j2-impl:2.24.3 - https://logging.apache.org/log4j/2.x/log4j-slf4j2-impl/) * Apache Thrift (org.apache.thrift:libthrift:0.19.0 - http://thrift.apache.org) * Apache Yetus - Audience Annotations (org.apache.yetus:audience-annotations:0.12.0 - https://yetus.apache.org/audience-annotations) * Apache Yetus - Audience Annotations (org.apache.yetus:audience-annotations:0.13.0 - https://yetus.apache.org/audience-annotations) @@ -775,7 +775,7 @@ The license texts of these dependencies can be found in the licenses directory. * javax.inject (javax.inject:javax.inject:1 - http://code.google.com/p/atinject/) * JBoss Logging 3 (org.jboss.logging:jboss-logging:3.6.0.Final - http://www.jboss.org) * JCIP Annotations under Apache License (com.github.stephenc.jcip:jcip-annotations:1.0-1 - http://stephenc.github.com/jcip-annotations) - * JCL 1.2 implemented over SLF4J (org.slf4j:jcl-over-slf4j:1.7.36 - http://www.slf4j.org) + * JCL 1.2 implemented over SLF4J (org.slf4j:jcl-over-slf4j:2.0.16 - http://www.slf4j.org) * Jettison (org.codehaus.jettison:jettison:1.5.4 - no url defined) * JSON Small and Fast Parser (net.minidev:json-smart:2.5.1 - https://urielch.github.io/) * JVM Integration for Metrics (io.dropwizard.metrics:metrics-jvm:4.2.29 - https://metrics.dropwizard.io/metrics-jvm) @@ -998,8 +998,8 @@ The license texts of these dependencies can be found in the licenses directory. * Checker Qual (org.checkerframework:checker-qual:3.48.3 - https://checkerframework.org/) * JCodings (org.jruby.jcodings:jcodings:1.0.58 - http://nexus.sonatype.org/oss-repository-hosting.html/jcodings) * Joni (org.jruby.joni:joni:2.2.1 - http://nexus.sonatype.org/oss-repository-hosting.html/joni) - * JUL to SLF4J bridge (org.slf4j:jul-to-slf4j:1.7.36 - http://www.slf4j.org) - * SLF4J API Module (org.slf4j:slf4j-api:1.7.36 - http://www.slf4j.org) + * JUL to SLF4J bridge (org.slf4j:jul-to-slf4j:2.0.16 - http://www.slf4j.org) + * SLF4J API Module (org.slf4j:slf4j-api:2.0.16 - http://www.slf4j.org) * System Out and Err redirected to SLF4J (uk.org.lidalia:sysout-over-slf4j:1.0.2 - http://projects.lidalia.org.uk/sysout-over-slf4j/) The Go license diff --git a/external/storm-kafka-migration/pom.xml b/external/storm-kafka-migration/pom.xml index b384c26541..a988e3f730 100644 --- a/external/storm-kafka-migration/pom.xml +++ b/external/storm-kafka-migration/pom.xml @@ -69,7 +69,7 @@ org.apache.logging.log4j - log4j-slf4j-impl + log4j-slf4j2-impl commons-lang diff --git a/pom.xml b/pom.xml index cf919e568b..8adffe1a9e 100644 --- a/pom.xml +++ b/pom.xml @@ -108,7 +108,7 @@ 4.1.115.Final 1.0.2 2.24.3 - 1.7.36 + 2.0.16 4.2.29 5.14.2 3.9.3 diff --git a/storm-client/pom.xml b/storm-client/pom.xml index fd3a8a02b6..83fa5768f9 100644 --- a/storm-client/pom.xml +++ b/storm-client/pom.xml @@ -53,7 +53,7 @@ org.apache.logging.log4j - log4j-slf4j-impl + log4j-slf4j2-impl org.slf4j diff --git a/storm-core/pom.xml b/storm-core/pom.xml index a3426b601e..940213ac5a 100644 --- a/storm-core/pom.xml +++ b/storm-core/pom.xml @@ -117,7 +117,7 @@ org.apache.logging.log4j - log4j-slf4j-impl + log4j-slf4j2-impl diff --git a/storm-webapp/pom.xml b/storm-webapp/pom.xml index 61250b7f7c..baaaa0d4e6 100644 --- a/storm-webapp/pom.xml +++ b/storm-webapp/pom.xml @@ -45,7 +45,7 @@ org.apache.logging.log4j - log4j-slf4j-impl + log4j-slf4j2-impl provided