Completely remove log4j (#1466)

* Completely remove log4j

Prevent Gradle plugin from using log4j.
This commit is contained in:
Weimin Yu 2021-12-13 14:18:31 -05:00 committed by GitHub
parent 25e23ceef9
commit 69d06989c0
3 changed files with 5 additions and 2 deletions

View file

@ -64,6 +64,8 @@ configurations {
it.exclude group: 'org.mockito', module: 'mockito-core'
}
all.each {
// log4j has high-profile security vulnerabilities. It's a transitive dependency used by some
// Apache Beam packages. Excluding it does not impact our troubleshooting needs.
it.exclude group: 'org.apache.logging.log4j'
}
}