Restore log4j exclusion in gradle build (#1801)

This commit is contained in:
Weimin Yu 2022-09-30 14:04:00 -04:00 committed by GitHub
parent d0cec9ff54
commit 63680f16ad

View file

@ -62,6 +62,12 @@ configurations {
// See https://issues.apache.org/jira/browse/BEAM-8862
it.exclude group: 'org.mockito', module: 'mockito-core'
}
all.each {
// log4j has high-profile security vulnerabilities. It's a transitive
// dependency used by some Apache Beam packages. Excluding it does not
// impact our troubleshooting needs.
it.exclude group: 'org.apache.logging.log4j'
}
}
dependencies {