Update and weaken Log4J2 dependency (#2085)

* Use the more recent 2.15.0 as baseline * For the published package, express a provided dependency rather than actually pulling in Log4J2 ourselves
census-instrumentation · Dec 11, 2021 · 4852502 · 4852502
1 parent 5f9a0fa
commit 4852502
Show file tree

Hide file tree

Showing 2 changed files with 5 additions and 4 deletions.
diff --git a/build.gradle b/build.gradle
@@ -166,7 +166,7 @@ subprojects {
         googleAuthVersion = '0.20.0'
         googleCloudBetaVersion = '0.100.0-beta'
         googleCloudGaVersion = '1.82.0'
-        log4j2Version = '2.11.1'
+        log4j2Version = '2.15.0'
         signalfxVersion = '0.0.48'
         springBoot2Version = '2.1.5.RELEASE'
         springBootVersion = '1.5.15.RELEASE'

diff --git a/contrib/log_correlation/log4j2/build.gradle b/contrib/log_correlation/log4j2/build.gradle
@@ -3,10 +3,11 @@ description = 'OpenCensus Log4j 2 Log Correlation'
 apply plugin: 'java'
 
 dependencies {
-    compile project(':opencensus-api'),
-            libraries.log4j2
+    compile project(':opencensus-api')
+    compileOnly libraries.log4j2
 
-    testCompile libraries.guava
+    testCompile libraries.guava,
+                libraries.log4j2
 
     signature "org.codehaus.mojo.signature:java16:+@signature"
 }