[wildfly-dev] wildfly and transitive dependency to log4j-v1, possibly via apache cxf

[Andrew Marlow]

Hello everyone,

I am trying to build the latest wildfly from a clone of the github repo at
https://github.com/bstansberry/wildfly.git. I understand this is the latest
and is from the principal maintainer, Brian Stansberry. I've changed the
pom references to the old log4j-v1 to the new log4j-v2 but a pom dependency
analysis reveals there is a still a dependency on v1. I am at a loss as to
where exactly it is coming from. I hope someone here can shed some light
please.

The relevant part of the dependency tree is shown from the extract below:

INFO [m] org.wildfly:wildfly-ts-integ-smoke:jar:19.0.0.Beta1-SNAPSHOT
INFO [m] +- org.jboss.ws.cxf:jbossws-cxf-client:jar:5.3.0.Final:test
   :
INFO [m] |  +- log4j:log4j:jar:1.2.17:test

Initially I thought it might be coming via an old version of apache CXF but
I see from the top level pom that version 3.3.4 is being used, which is the
latest. Any ideas?
-- 
Regards,

Andrew Marlow
http://www.andrewpetermarlow.co.uk
-------------- next part --------------
An HTML attachment was scrubbed...
URL: http://lists.jboss.org/pipermail/wildfly-dev/attachments/20191201/e88c2b1b/attachment.html