Upgrade to log4j2 2.17.1
Add explicit dependencies on log4j-core and log4j-api to override
derived version and force 2.17.1
Issue-ID: CCSDK-3556
Signed-off-by: Dan Timoney <dtimoney@att.com>
Change-Id: I9e8ebbaaaccad59735236810ad25c9b50ef84322
diff --git a/springboot/spring-boot-setup/src/main/resources/pom-template.xml b/springboot/spring-boot-setup/src/main/resources/pom-template.xml
index efa15a3..4df81db 100644
--- a/springboot/spring-boot-setup/src/main/resources/pom-template.xml
+++ b/springboot/spring-boot-setup/src/main/resources/pom-template.xml
@@ -203,6 +203,16 @@
<artifactId>liquibase-core</artifactId>
<version>4.4.2-nordix</version>
</dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-api</artifactId>
+ <version>${log4j2.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-core</artifactId>
+ <version>${log4j2.version}</version>
+ </dependency>
</dependencies>
</dependencyManagement>
diff --git a/springboot/springboot1/pom.xml b/springboot/springboot1/pom.xml
index e04483f..832c46c 100644
--- a/springboot/springboot1/pom.xml
+++ b/springboot/springboot1/pom.xml
@@ -203,6 +203,16 @@
<artifactId>liquibase-core</artifactId>
<version>4.4.2-nordix</version>
</dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-api</artifactId>
+ <version>${log4j2.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-core</artifactId>
+ <version>${log4j2.version}</version>
+ </dependency>
</dependencies>
</dependencyManagement>
diff --git a/springboot/springboot2/pom.xml b/springboot/springboot2/pom.xml
index 644055e..253ebe2 100644
--- a/springboot/springboot2/pom.xml
+++ b/springboot/springboot2/pom.xml
@@ -203,6 +203,16 @@
<artifactId>liquibase-core</artifactId>
<version>4.4.2-nordix</version>
</dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-api</artifactId>
+ <version>${log4j2.version}</version>
+ </dependency>
+ <dependency>
+ <groupId>org.apache.logging.log4j</groupId>
+ <artifactId>log4j-core</artifactId>
+ <version>${log4j2.version}</version>
+ </dependency>
</dependencies>
</dependencyManagement>