Skip to content

Commit

Permalink
[BEAM-12422] Removing unnecessary log4j-api dependency
Browse files Browse the repository at this point in the history
Vendored gRPC 1.36.0 was using a log4j version with security issues.
gRPC does not declare log4j dependency. It uses java.util.logging
for logging. Therefore removing the dependency.
  • Loading branch information
suztomo committed Jun 29, 2021
1 parent 5fffad6 commit 5690af7
Showing 1 changed file with 0 additions and 3 deletions.
Original file line number Diff line number Diff line change
Expand Up @@ -70,7 +70,6 @@ class GrpcVendoring_1_36_0 {
return [
'com.google.errorprone:error_prone_annotations:2.4.0',
'commons-logging:commons-logging:1.2',
'org.apache.logging.log4j:log4j-api:2.6.2',
'org.slf4j:slf4j-api:1.7.30',
// TODO(BEAM-9288): Enable relocation for conscrypt
"org.conscrypt:conscrypt-openjdk-uber:$conscrypt_version"
Expand Down Expand Up @@ -161,8 +160,6 @@ class GrpcVendoring_1_36_0 {
"module-info.class",
"org/apache/commons/logging/**",
"org/apache/log/**",
"org/apache/log4j/**",
"org/apache/logging/log4j/**",
"org/checkerframework/**",
"org/codehaus/mojo/animal_sniffer/**",
"org/conscrypt/**",
Expand Down

0 comments on commit 5690af7

Please sign in to comment.