Upgraded SLF4J from 1.7.32 to 1.7.35
Added slf4j-log4j12 to banned dependencies
This closes
<org.apache.httpcomponents.httpclient.version>4.5.13</org.apache.httpcomponents.httpclient.version>
<org.apache.httpcomponents.httpcore.version>4.4.15</org.apache.httpcomponents.httpcore.version>
<org.bouncycastle.version>1.70</org.bouncycastle.version>
- <org.slf4j.version>1.7.32</org.slf4j.version>
+ <org.slf4j.version>1.7.35</org.slf4j.version>
<ranger.version>2.1.0</ranger.version>
<jetty.version>9.4.44.v20210927</jetty.version>
<jackson.version>2.13.1</jackson.version>
<artifactId>slf4j-simple</artifactId>
<version>${org.slf4j.version}</version>
</dependency>
- <dependency>
- <groupId>org.slf4j</groupId>
- <artifactId>slf4j-log4j12</artifactId>
- <version>${org.slf4j.version}</version>
- </dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk15on</artifactId>
<exclude>c3p0:c3p0:*:*:compile</exclude>
<!-- Versions of JSR305 before 3.0.1 are not allowed https://github.com/findbugsproject/findbugs/issues/128 -->
<exclude>com.google.code.findbugs:jsr305:*:*:compile</exclude>
+ <!-- SLF4J routing to Log4j 1.2 is a runtime implementation that conflicts with Logback -->
+ <exclude>org.slf4j:slf4j-log4j12</exclude>
<!-- Log4J excluded in favor of log4j-over-slf4j and logback -->
<exclude>log4j:log4j:*</exclude>
<!-- Log4j 2 log4j-core excluded in favor of log4j-to-slf4j routing to logback -->
