Yes, in general, you cannot wait for every other dependency release. SLF4J 2.0 is a bigger deal because it is the first stable release to add jigsaw support. But you are right: users can just pull in version 2.19.0 of log4j to get SLF4J 2.0 compatibility. That's why I was undecided and gave neither +1 nor -1.
On 2022/09/13 10:38:35 PJ Fanning wrote: > With a version number of 2.19.0, I am expecting that users who want to use > POI 5.2.2 or 5.2.3 with log4j 2.19.0 can just update their own build files. > While I like to keep POI up to date, delaying releases to wait for downstream > jars can be a real pain. Once one dependency is ready, whispers come through > that yet another dependency is considering a release. Since I cut the RC1, > graphics2d has already published a v0.41. > > If there was a security issue, I would wait - but I checked the mailing lists > and there is no evidence that 2.19.0 has any security implications. > > > > > > On Tuesday 13 September 2022 at 11:02:24 IST, Axel Howind <a...@apache.org> > wrote: > > > > > > Hi, > > the colleagues over at log4j are preparing the 2.19.0 release (currently in > RC) that adds a bugfix and support for SLF4J 2.0 that was requested by Spring > devs. They have found a last minute issue that is currently being worked on > and will probably release soon. Maybe it's worth to wait for that release and > then go directly to log4j 2.19.0 as it seems both POI and log4j will release > at about the same time. > > Axel > > On 2022/09/09 20:51:01 PJ Fanning wrote: > > Hi everyone, > > > > The Apache POI project is pleased to announce the release of POI 5.2.3. > > Featured are a handful of new areas of functionality, and numerous bug > > fixes. > > > > See the downloads page for binary and source distributions: > > https://poi.apache.org/download.html > > > > > > Release Notes > > > > Changes > > ------------ > > The most notable changes in this release are: > > > > * upgrade dependencies: log4j-api 2.18.0, xmlbeans 5.1.1, xmlsec 3.0.0, > > graphics2d 0.40, pdfbox 2.0.26 ... > > * Avoid some more possible overly large memory allocations on certain input > > documents > > * Support capitalized text in WordExtractors [#63575,#63576] > > * Fix issues with some Excel functions > > [#65988,#66022,#66047,#66087,#66098,#66181] > > * Support more Excel functions > > [#github-330,#58468,#66083,#66090,#66092,#66093,#66094,#66095,#66097,#66105] > > * Shifting Excel rows or columns can damage formulas in tables [#66215] > > * Some Password protected XLS files are not rea [#66115] > > * SXSSF doesn't update dimension field [#65562] > > * SXSSFWorkbook should work even when fonts not installed on OS [#66230] > > * Issue with orphaned (in package) images and notes post slide removal > > [#66242] > > * Issues with XSSFTables [#66211,#66212,#66213] > > > > > > A full list of changes is available in the change log: > > https://poi.apache.org/changes.html. > > > > The artifacts are at: > > > > https://dist.apache.org/repos/dist/dev/poi/ > > > > > > You can use this maven URL for your mvn/gradle builds: > > > > https://repository.apache.org/content/repositories/staging > > > > > > I haven't updated the "provided" dependencies as those have to be activated > > anyway explicitly. > > > > > > Please vote to release the artifacts. Here is my +1. > > > > > > The vote is open until 2022-09-16 23:00 UTC. > > > > Planned release announcement date is Sunday, 2022-09-17. > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org > > For additional commands, e-mail: dev-h...@poi.apache.org > > > > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org > For additional commands, e-mail: dev-h...@poi.apache.org > > > --------------------------------------------------------------------- > To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org > For additional commands, e-mail: dev-h...@poi.apache.org > > --------------------------------------------------------------------- To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org For additional commands, e-mail: dev-h...@poi.apache.org
