fix: bump log4j to 2.17.0 (#28)

* fix: bump log4j to 2.17.0 * fix: bump log4J to 2.17.0
corona-warn-app · Dec 22, 2021 · ed9dab2 · ed9dab2
1 parent 8b3ad7d
commit ed9dab2
Showing 1 changed file with 12 additions and 6 deletions.
diff --git a/pom.xml b/pom.xml
@@ -79,12 +79,6 @@
                 <type>pom</type>
                 <scope>import</scope>
             </dependency>
-            <dependency>
-                <groupId>org.apache.logging.log4j</groupId>
-                <artifactId>log4j-bom</artifactId>
-                <version>2.16.0</version>
-                <scope>import</scope>
-            </dependency>
         </dependencies>
     </dependencyManagement>
 
@@ -233,6 +227,18 @@
             <artifactId>shedlock-provider-jdbc-template</artifactId>
             <version>${shedlock.version}</version>
         </dependency>
+        <dependency>
+          <groupId>org.apache.logging.log4j</groupId>
+          <artifactId>log4j-api</artifactId>
+          <version>2.17.0</version>
+          <scope>runtime</scope>
+      </dependency>
+      <dependency>
+        <groupId>org.apache.logging.log4j</groupId>
+        <artifactId>log4j-to-slf4j</artifactId>
+        <version>2.17.0</version>
+        <scope>runtime</scope>
+    </dependency>
     </dependencies>
 
   <build>