New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
SLF4J 2.0.0 requires logback 1.3.0 #4846
Comments
see #4786 |
With your new setup I expect you would run into an error when you would try to create a debug logfile (when you use the |
Quite possibly, I haven't tried it, but could test it if another data point is useful. I had missed the other issue and just wanted to make sure it was on the radar. It is easy enough for us to work around. |
@jeremylong what do you think? Maybe best to revert the slf4j update to 2.0.0 and release 7.2.1? I have not verified, but as there are direct references in its codebase to slf4j 1.x StaticLoggerBinder I suspect that the ant task will also suffer from logging issues due to the slf4j version bump. |
We have the same problem here...@mcondellva can you please post the steps of your workaround? Thanks! |
@maxbeltr
|
Thanks a lot! |
Describe the bug
SLF4J 2.0.0 requires logback 1.3.0+
Running 7.2.0 version of ODC gives the following warnings:
And then fails to provide normal logged data besides the warnings above.
Version of dependency-check used
The problem occurs using version 7.2.0 of the cli
Log file
Warning output provided above.
To Reproduce
dependency-check.bat" --format JSON --prettyPrint --enableExperimental --out C:****\dc-output-20220914093309.json" --yarn "D:\Program Files\Yarn\bin\yarn.cmd" --scan ****
Expected behavior
A clear and concise description of what you expected to happen.
Additional context
I downloaded logback-core-1.3.0.jar and logback-classic-1.3.0.jar and replaced the 1.2.11 versions with the updated versions and logging worked as it did in previous versions of ODC.
The text was updated successfully, but these errors were encountered: