See https://github.com/apache/logging-log4j2/issues/3196 for details.
Seems having a combination of log4j-api:2.24.1 and log4j-core:2.24.0 is broken, but we likely end up in such situations. Downgrading log4j-api to 2.24.0 for now would avoid running into this for now. Should we re-spin the release? Otherwise we should at least add a note to the release notes/changelog instructing to upgrade log4j-core to 2.24.1 as well. Regards... Dominik. On Sun, Nov 10, 2024 at 9:49 AM Dominik Stadler <dominik.stad...@gmx.at> wrote: > Hi, > > I started to test a bit with the RC, I see a strange problem related to > Log4j, the static getLogger() returns null when using POI 5.4.0 and Log4j > 2.24.0 in a sample project. > > When updating Log4j to 2.24.1, it works again. > > So sounds like a regression in Log4j 2.24.1 when combined with 2.24.0, > which would be strange. > > This reproduces with a very simple project, e.g. running "./gradlew > runWriteFile -PpoiVersion=5.4.0" in a checkout of > https://github.com/centic9/poi-reproduce > > Would be interesting if others see the same! > > Thanks... Dominik. > > > On Fri, Nov 8, 2024 at 8:04 PM PJ Fanning <fannin...@yahoo.com.invalid> > wrote: > >> Hello POI Community, >> >> This is a call for a vote to release Apache POI version 5.4.0 (RC1). >> >> The discussion thread: >> https://lists.apache.org/thread/fjxgn9rjo5x8ho9ssnow32mrrrotlhgj >> >> The release candidate: >> https://dist.apache.org/repos/dist/dev/poi/5.4.0-RC1/ >> >> >> This release has been signed with a PGP key available here: >> https://downloads.apache.org/poi/KEYS >> >> Release Notes: >> https://dist.apache.org/repos/dist/dev/poi/RELEASE-NOTES-5.4.0.txt >> >> >> I will add the svn tag REL_5_4_0 if the vote passes. >> >> Svn commit ID: https://svn.apache.org/repos/asf/poi/trunk@1921817 >> >> >> >> Please download, verify, and test. >> >> >> We have also staged jars in the Apache Nexus Repository. >> These were built with the same code as appears in this Source Release >> Candidate. >> We would appreciate if users could test with these too. >> >> If anyone finds any serious problems with these jars, please also notify >> us on this thread. >> >> https://repository.apache.org/content/groups/staging/org/apache/poi/ >> >> In gradle, you can add this repository. >> >> maven { >> url "https://repository.apache.org/content/groups/staging/"; >> } >> >> >> The VOTE will pass if we have more positive votes than negative votes >> and there must be a minimum of 3 approvals from POI PMC members. >> >> I will leave the vote open for at least a week. >> >> [ ] +1 approve >> [ ] +0 no opinion >> [ ] -1 disapprove with the reason >> >> To learn more about Apache POI, please see https://poi.apache.org/ >> >> >> Checklist for reference: >> [ ] Download links are valid. >> [ ] Checksums and signatures. >> [ ] LICENSE/NOTICE files exist >> [ ] No unexpected binary files >> [ ] Source files have ASF headers >> [ ] Can compile from source >> >> >> To compile from the source, please refer to: >> https://poi.apache.org/devel/index.html >> >> Some notes about verifying downloads can be found at: >> https://poi.apache.org/download.html >> >> >> Here is my +1 (binding). >> >> >> Thanks, >> PJ Fanning (Apache POI PMC member) >> >> --------------------------------------------------------------------- >> To unsubscribe, e-mail: dev-unsubscr...@poi.apache.org >> For additional commands, e-mail: dev-h...@poi.apache.org >> >>
