ramanathan1504 commented on issue #4007: URL: https://github.com/apache/logging-log4j2/issues/4007#issuecomment-4954892338
I noticed that <bnd.annotation.version> is explicitly hardcoded in the "Direct dependency version properties" section of log4j-parent/pom.xml. By updating it to 7.2.3 locally, we fix the immediate JDK 8 issue. However, this means we are overriding the property from logging-parent and will have to manually bump it again in the future. Should we keep this local override for the sake of explicit dependency tracking/Dependabot, or should we remove the property entirely from log4j-parent so it dynamically inherits from logging-parent in the future? (If we remove it, we must wait for logging-parent to release the 7.2.3 update first). For now, can I bump it locally to provide an immediate fix for 2.x. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
