svn commit: r1761992 - /ofbiz/trunk/build.gradle

[jacopoc]

Author: jacopoc
Date: Thu Sep 22 19:06:58 2016
New Revision: 1761992

URL: http://svn.apache.org/viewvc?rev=1761992&view=rev
Log:
Improved: upgraded Apache Tomcat from 8.0.36 to 8.0.37 and Log4j from 2.3 to
2.6.2.

Added a few comments to document the purpose of the various Log4j dependencies.

Modified:
    ofbiz/trunk/build.gradle

Modified: ofbiz/trunk/build.gradle
URL: http://svn.apache.org/viewvc/ofbiz/trunk/build.gradle?rev=1761992&r1=1761991&r2=1761992&view=diff
==============================================================================
--- ofbiz/trunk/build.gradle (original)
+++ ofbiz/trunk/build.gradle Thu Sep 22 19:06:58 2016
@@ -110,15 +110,15 @@ dependencies {
     compile 'org.apache.geronimo.components:geronimo-transaction:3.1.1'
     compile 'org.apache.geronimo.specs:geronimo-jms_1.1_spec:1.1.1'
     compile 'org.apache.httpcomponents:httpclient-cache:4.4.1'
-    compile 'org.apache.logging.log4j:log4j-api:2.3'
+    compile 'org.apache.logging.log4j:log4j-api:2.6.2' // the API of log4j 2
     compile 'org.apache.poi:poi:3.14'
     compile 'org.apache.shiro:shiro-core:1.3.0'
     compile 'org.apache.tika:tika-core:1.12'
     compile 'org.apache.tika:tika-parsers:1.12'
-    compile 'org.apache.tomcat:tomcat-catalina-ha:8.0.36'
-    compile 'org.apache.tomcat:tomcat-catalina:8.0.36'
-    compile 'org.apache.tomcat:tomcat-jasper:8.0.36'
-    compile 'org.apache.tomcat:tomcat-tribes:8.0.36'
+    compile 'org.apache.tomcat:tomcat-catalina-ha:8.0.37'
+    compile 'org.apache.tomcat:tomcat-catalina:8.0.37'
+    compile 'org.apache.tomcat:tomcat-jasper:8.0.37'
+    compile 'org.apache.tomcat:tomcat-tribes:8.0.37'
     compile 'org.apache.xmlgraphics:fop:2.1'
     compile 'org.apache.xmlrpc:xmlrpc-client:3.1.2'
     compile 'org.apache.xmlrpc:xmlrpc-server:3.1.2'
@@ -138,8 +138,11 @@ dependencies {
     runtime 'org.apache.axis2:axis2-transport-local:1.7.1'
     runtime 'org.apache.derby:derby:10.11.1.1'
     runtime 'org.apache.geronimo.specs:geronimo-jaxrpc_1.1_spec:1.1'
-    runtime 'org.apache.logging.log4j:log4j-core:2.3'
-    runtime 'org.apache.logging.log4j:log4j-slf4j-impl:2.3'
+    runtime 'org.apache.logging.log4j:log4j-core:2.6.2' // the implementation of the log4j 2 API
+    runtime 'org.apache.logging.log4j:log4j-slf4j-impl:2.6.2' // for external jars using slf4j: routes logging to log4j 2
+    runtime 'org.apache.logging.log4j:log4j-1.2-api:2.6.2' // for external jars using the old log4j1.2: routes logging to log4j 2
+    runtime 'org.apache.logging.log4j:log4j-jul:2.6.2' // for external jars using the java.util.logging: routes logging to log4j 2
+
     runtime 'org.codeartisans.thirdparties.swing:batik-all:1.8pre-r1084380'
     runtime 'net.sf.barcode4j:barcode4j:2.1'
     runtime 'net.sf.barcode4j:barcode4j-fop-ext:2.1'
@@ -155,9 +158,8 @@ dependencies {
     runtime 'net.sf.dozer:dozer:4.2.1'
     runtime 'org.apache.axis2:axis2-adb:1.7.1'
     runtime 'org.apache.httpcomponents:httpcore:4.4.1'
-    runtime 'org.apache.logging.log4j:log4j-1.2-api:2.3'
     runtime 'org.apache.servicemix.bundles:org.apache.servicemix.bundles.xpp3:1.1.4c_7'
-    runtime 'org.apache.tomcat.extras:tomcat-extras-juli-adapters:8.0.36'
+    runtime 'org.apache.tomcat.extras:tomcat-extras-juli-adapters:8.0.37'
     runtime 'org.apache.xalan:com.springsource.org.apache.xml.serializer:2.7.1'
     runtime 'ws-commons-java5:ws-commons-java5:1.0.1'