Adopt slf4j-2.0.12

This patch upgrades baseline SLF4J to 2.0.12:
https://www.slf4j.org/faq.html#changesInVersion200
https://www.slf4j.org/news.html#2.0.1
https://www.slf4j.org/news.html#2.0.2
https://www.slf4j.org/news.html#2.0.3
https://www.slf4j.org/news.html#2.0.4
https://www.slf4j.org/news.html#2.0.5
https://www.slf4j.org/news.html#2.0.6
https://www.slf4j.org/news.html#2.0.7
https://www.slf4j.org/news.html#2.0.8
https://www.slf4j.org/news.html#2.0.9
https://www.slf4j.org/news.html#2.0.10
https://www.slf4j.org/news.html#2.0.11
https://www.slf4j.org/news.html#2.0.12

The new baseline requires:
- logback-1.3.x, hence we adopt logback-1.3.14:
https://logback.qos.ch/news.html#1.3.0
https://logback.qos.ch/news.html#1.3.1
https://logback.qos.ch/news.html#1.3.2
https://logback.qos.ch/news.html#1.3.3
https://logback.qos.ch/news.html#1.3.4
https://logback.qos.ch/news.html#1.3.5
https://logback.qos.ch/news.html#1.3.6
https://logback.qos.ch/news.html#1.3.7
https://logback.qos.ch/news.html#1.3.8
https://logback.qos.ch/news.html#1.3.9
https://logback.qos.ch/news.html#1.3.10
https://logback.qos.ch/news.html#1.3.11
https://logback.qos.ch/news.html#1.3.12
https://logback.qos.ch/news.html#1.3.13
https://logback.qos.ch/news.html#1.3.14

- log4j-2.19.0+, hence we adopt log4j-2.23.0:
https://logging.apache.org/log4j/2.x/release-notes.html#release-notes-2-18-0
https://logging.apache.org/log4j/2.x/release-notes.html#release-notes-2-19-0
https://logging.apache.org/log4j/2.x/release-notes.html#release-notes-2-20-0
https://logging.apache.org/log4j/2.x/release-notes.html#release-notes-2-21-0
https://logging.apache.org/log4j/2.x/release-notes.html#release-notes-2-21-1
https://logging.apache.org/log4j/2.x/release-notes.html#release-notes-2-22-0
https://logging.apache.org/log4j/2.x/release-notes.html#release-notes-2-22-1
https://logging.apache.org/log4j/2.x/release-notes.html#release-notes-2-23-0

Change-Id: Ib0c08b9c6d8c53f30f72e1f9dda3f86ce40059f6
Signed-off-by: Robert Varga <robert.varga@pantheon.tech>

diff --git a/odlparent-dependency-check/pom.xml b/odlparent-dependency-check/pom.xml
index 9bcc60dbd4d6f10e87e79dbc8718bb8784848617..84606c0e54f930480cb303364aeade71115c065c 100644 (file)
--- a/odlparent-dependency-check/pom.xml
+++ b/odlparent-dependency-check/pom.xml
@@ -145,7 +145,7 @@
             <groupId>org.apache.logging.log4j</groupId>
             <artifactId>log4j-bom</artifactId>
             <type>pom</type>
-            <version>2.17.2</version>
+            <version>2.23.0</version>
         </dependency>
         <dependency>
             <groupId>org.assertj</groupId>
@@ -349,6 +349,12 @@
             <groupId>org.osgi</groupId>
             <artifactId>org.osgi.util.tracker</artifactId>
         </dependency>
+        <dependency>
+            <groupId>org.slf4j</groupId>
+            <artifactId>slf4j-bom</artifactId>
+            <type>pom</type>
+            <version>2.0.9</version>
+        </dependency>
         <dependency>
             <groupId>org.sonarsource.java</groupId>
             <artifactId>sonar-jacoco-listeners</artifactId>

diff --git a/odlparent/pom.xml b/odlparent/pom.xml
index 43925350c6a760f78858bfb24682df71073f5a4d..2313a7eb67eaf79da343eaf8d45a3254cc1a9d32 100644 (file)
--- a/odlparent/pom.xml
+++ b/odlparent/pom.xml
@@ -202,23 +202,31 @@
 
       <!--
            Supporting Libraries
-       -->
+      -->
+      <dependency>
+        <groupId>org.slf4j</groupId>
+        <artifactId>slf4j-bom</artifactId>
+        <version>2.0.9</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
+
       <dependency>
         <groupId>ch.qos.logback</groupId>
         <artifactId>logback-core</artifactId>
-        <version>1.2.13</version>
+        <version>1.3.14</version>
       </dependency>
       <dependency>
         <groupId>ch.qos.logback</groupId>
         <artifactId>logback-classic</artifactId>
-        <version>1.2.13</version>
+        <version>1.3.14</version>
       </dependency>
 
       <!-- log4j2 -->
       <dependency>
         <groupId>org.apache.logging.log4j</groupId>
         <artifactId>log4j-bom</artifactId>
-        <version>2.17.2</version>
+        <version>2.23.0</version>
         <scope>import</scope>
         <type>pom</type>
       </dependency>
@@ -1135,18 +1143,6 @@
               <artifactId>spotbugs</artifactId>
               <version>13.1.1-SNAPSHOT</version>
             </dependency>
-
-            <!-- The SpotBugs Maven plugin uses SLF4J-2 -->
-            <dependency>
-              <groupId>org.slf4j</groupId>
-              <artifactId>slf4j-api</artifactId>
-              <version>2.0.9</version>
-            </dependency>
-            <dependency>
-              <groupId>org.slf4j</groupId>
-              <artifactId>slf4j-simple</artifactId>
-              <version>2.0.9</version>
-            </dependency>
           </dependencies>
           <configuration>
             <plugins>