Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Remove log4j coming from intellij dependencies #3592

Merged
merged 2 commits into from May 13, 2024
Merged

Remove log4j coming from intellij dependencies #3592

merged 2 commits into from May 13, 2024

Conversation

whyoleg
Copy link
Contributor

@whyoleg whyoleg commented Apr 30, 2024

Fixes #3508

Checked shadowJar contents before and after this change: the only difference is in the absence of log4j classes.
Note: we still include 2 classes from log4j - Level and Priority - they are coming from kotlin-compiler and don't trigger any dependency vulnerability checks.
We can drop those classes, and tests are working fine without them, but I've decided not to do this, as if they are used somehow in some situation, it will cause No class found exception.

Additionally, I've updated some comments and removed confusing dependencies which are not needed in analysis-kotlin-symbols, as they are coming from analysis-java-psi and kotlin-compiler anyway - no changes to those classes in final shadowJar have happened.

@whyoleg whyoleg self-assigned this Apr 30, 2024

implementation(projects.dokkaSubprojects.analysisMarkdownJb)

implementation(libs.intellij.java.psi.impl)
implementation(libs.intellij.platform.util.api)
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Can we remove them from toml as well?

Copy link
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

yeah, dropped them

@whyoleg whyoleg requested review from IgnatBeresnev and removed request for IgnatBeresnev May 13, 2024 12:51
@whyoleg whyoleg merged commit 2a1f2b8 into master May 13, 2024
14 checks passed
@whyoleg whyoleg deleted the remove-log4j branch May 13, 2024 16:24
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

analysis-kotlin-descriptors-1.9.10.jar is bundled with log4j:1.2.17.2
3 participants