Hi tony, Le 21/12/2022 à 22:58, tony mancill a écrit :
On Tue, Dec 20, 2022 at 11:45:54PM +0100, Pierre Gruet wrote:Control: retitle -1 Please make liblog4j2-java depend on junit5Hello, In version 2.19.0-1 of liblog4j2-java, the file /usr/share/maven-repo/org/apache/logging/log4j/log4j/debian/log4j-debian.pom declares the junit-bom artifact as a dependency. It is shipped in junit5. If this dependency is not added, reverse dependencies of liglog4j2-java fail to build (see logs above) as the junit-bom artifact is not found.Hi Pierre, I'm wondering if it wouldn't better to remove junit-bom from log4j pom. I don't believe we actually need junit5 at runtime for log4j2, so packages depending on liblog4j2-java should not have to install junit5. Any concerns with taking that approach and addressing the bug by adjusting the pom shipped with liblog4j2-java?
Thanks for having a look; I haven't looked further but I also fail to imagine why junit5 would be needed, so I agree with the proposed fix!
Thanks, tony
Cheers, -- Pierre
OpenPGP_signature
Description: OpenPGP digital signature