761 lines
34 KiB
Plaintext
761 lines
34 KiB
Plaintext
Apache Commons Logging 1.3.5 Release Notes
|
||
------------------------------------------
|
||
|
||
The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.5.
|
||
|
||
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
|
||
well-known logging systems.
|
||
|
||
This is a feature and maintenance release. Java 8 or later is required.
|
||
|
||
Changes in this version
|
||
-----------------------
|
||
|
||
|
||
Fixed Bugs
|
||
----------
|
||
|
||
* Javadoc is missing its Overview page. Thanks to Gary Gregory.
|
||
* Remove -nouses directive from maven-bundle-plugin. OSGi package imports now state 'uses' definitions for package imports, this doesn't affect JPMS (from org.apache.commons:commons-parent:80). Thanks to Gary Gregory.
|
||
|
||
Changes
|
||
-------
|
||
|
||
* Bump org.apache.commons:commons-parent from 72 to 81 #285, #287, #295, #298, #303, #310, #339. Thanks to Gary Gregory, Dependabot.
|
||
* Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0 #288 [test]. Thanks to Gary Gregory, Dependabot.
|
||
* Bump log4j2.version from 2.23.1 to 2.24.3 #292, #299, #319, #328. Thanks to Gary Gregory, Dependabot.
|
||
|
||
Removed:
|
||
* Remove "cobertura" plugin, we use JaCoco, Cobertura is unmaintained. Thanks to Gary Gregory.
|
||
|
||
Historical list of changes: https://commons.apache.org/proper/commons-logging/changes.html
|
||
|
||
Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi
|
||
|
||
For complete information on Apache Commons Logging, including instructions on how to submit bug reports,
|
||
patches, or suggestions for improvement, see the Apache Commons Logging website:
|
||
|
||
https://commons.apache.org/proper/commons-logging/
|
||
|
||
-----------------------------------------------------------------------------
|
||
|
||
Apache Commons Logging 1.3.5 Release Notes
|
||
------------------------------------------
|
||
|
||
The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.5.
|
||
|
||
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
|
||
well-known logging systems.
|
||
|
||
This is a feature and maintenance release. Java 8 or later is required.
|
||
|
||
Changes in this version
|
||
-----------------------
|
||
|
||
|
||
Changes
|
||
-------
|
||
|
||
* Bump org.apache.commons:commons-parent from 72 to 78 #285, #287, #295, #298, #303, #310. Thanks to Gary Gregory, Dependabot.
|
||
* Bump org.apache.commons:commons-lang3 from 3.16.0 to 3.17.0 #288 [test]. Thanks to Gary Gregory, Dependabot.
|
||
* Bump log4j2.version from 2.23.1 to 2.24.2 #292, #299, #319. Thanks to Gary Gregory, Dependabot.
|
||
|
||
Removed:
|
||
* Remove "cobertura" plugin, we use JaCoco, Cobertura is unmaintained. Thanks to Gary Gregory.
|
||
|
||
Historical list of changes: https://commons.apache.org/proper/commons-logging/changes-report.html
|
||
|
||
Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi
|
||
|
||
For complete information on Apache Commons Logging, including instructions on how to submit bug reports,
|
||
patches, or suggestions for improvement, see the Apache Commons Logging website:
|
||
|
||
https://commons.apache.org/proper/commons-logging/
|
||
|
||
-----------------------------------------------------------------------------
|
||
|
||
Apache Commons Logging 1.3.4 Release Notes
|
||
------------------------------------------
|
||
|
||
The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.4.
|
||
|
||
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
|
||
well-known logging systems.
|
||
|
||
This is a feature and maintenance release. Java 8 or later is required.
|
||
|
||
Changes in this version
|
||
-----------------------
|
||
|
||
|
||
Fixed Bugs
|
||
----------
|
||
|
||
* LOGGING-192: Fix factory loading from context class loader #280, #281. Thanks to Bj<42>rn Kautler, Piotr Karwasz.
|
||
|
||
Changes
|
||
-------
|
||
|
||
* Bump org.apache.commons:commons-parent from 71 to 72. Thanks to Gary Gregory.
|
||
* Bump org.slf4j:slf4j-api from 2.0.13 to 2.0.16 #276, #282. Thanks to Gary Gregory, Dependabot.
|
||
|
||
|
||
Historical list of changes: https://commons.apache.org/proper/commons-logging/changes-report.html
|
||
|
||
Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi
|
||
|
||
For complete information on Apache Commons Logging, including instructions on how to submit bug reports,
|
||
patches, or suggestions for improvement, see the Apache Commons Logging website:
|
||
|
||
https://commons.apache.org/proper/commons-logging/
|
||
|
||
-----------------------------------------------------------------------------
|
||
|
||
Apache Commons Logging 1.3.3 Release Notes
|
||
------------------------------------------
|
||
|
||
The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.3.
|
||
|
||
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
|
||
well-known logging systems.
|
||
|
||
This is a feature and maintenance release. Java 8 or later is required.
|
||
|
||
|
||
Fixed Bugs
|
||
----------
|
||
|
||
* LOGGING-193: Update Log4j 2 OSGi imports #268. Thanks to Philippe Marschall.
|
||
* Fix PMD UnnecessaryFullyQualifiedName in SimpleLog. Thanks to Gary Gregory.
|
||
* Fix NullPointerException in SimpleLog#write(Object) on null input. Thanks to Gary Gregory.
|
||
* Fix NullPointerException in SimpleLog#write(StringBuffer) on null input. Thanks to Gary Gregory.
|
||
|
||
Changes
|
||
-------
|
||
|
||
* Bump org.apache.commons:commons-parent from 69 to 71 #267. Thanks to Dependabot.
|
||
|
||
|
||
Historical list of changes: https://commons.apache.org/proper/commons-logging/changes-report.html
|
||
|
||
Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi
|
||
|
||
For complete information on Apache Commons Logging, including instructions on how to submit bug reports,
|
||
patches, or suggestions for improvement, see the Apache Commons Logging website:
|
||
|
||
https://commons.apache.org/proper/commons-logging/
|
||
|
||
-----------------------------------------------------------------------------
|
||
|
||
Apache Commons Logging 1.3.2 Release Notes
|
||
------------------------------------------
|
||
|
||
The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.2.
|
||
|
||
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
|
||
well-known logging systems.
|
||
|
||
This is a feature and maintenance release. Java 8 or later is required.
|
||
|
||
Changes in this version
|
||
-----------------------
|
||
|
||
Fixed Bugs
|
||
----------
|
||
|
||
* LOGGING-190: Add OSGi metadata to enable Service Loader Mediator #234. Thanks to Hannes Wellmann, Gary Gregory, Johan Compagner.
|
||
* LOGGING-191: Apache commons logging shows 1.4 as latest release instead of 1.3.1. Thanks to Hannes Wellmann, Gary Gregory, Johan Compagner.
|
||
* Deprecate org.apache.commons.logging.LogSource.jdk14IsAvailable. Thanks to Gary Gregory.
|
||
|
||
Changes
|
||
-------
|
||
|
||
* Bump org.apache.commons:commons-parent from 67 to 69 #240. Thanks to Dependabot.
|
||
* Bump org.slf4j:slf4j-api from 2.0.12 to 2.0.13 #248. Thanks to Dependabot.
|
||
|
||
Historical list of changes: https://commons.apache.org/proper/commons-logging/changes-report.html
|
||
|
||
Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi
|
||
|
||
For complete information on Apache Commons Logging, including instructions on how to submit bug reports,
|
||
patches, or suggestions for improvement, see the Apache Commons Logging website:
|
||
|
||
https://commons.apache.org/proper/commons-logging/
|
||
|
||
-----------------------------------------------------------------------------
|
||
|
||
Apache Commons Logging 1.3.1 Release Notes
|
||
------------------------------------------
|
||
|
||
The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.1.
|
||
|
||
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
|
||
well-known logging systems.
|
||
|
||
This is a feature and maintenance release. Java 8 or later is required.
|
||
|
||
Changes in this version
|
||
-----------------------
|
||
|
||
New features
|
||
------------
|
||
|
||
* Add Maven property project.build.outputTimestamp for build reproducibility. Thanks to Gary Gregory.
|
||
|
||
Fixed Bugs
|
||
----------
|
||
|
||
* Remove references to very old JDK and Commons Logging versions #201. Thanks to Elliotte Rusty Harold.
|
||
* Update from Logj 1 to the Log4j 2 API compatibility layer #231. Thanks to Gary Gregory, Piotr P. Karwasz.
|
||
* Allow Servlet 4 in OSGi environment #191. Thanks to V<>clav Haisman.
|
||
* Fix generics warnings #213. Thanks to Elliotte Rusty Harold.
|
||
* LOGGING-189: Fix Import-Package entry for org.slf4j #188. Thanks to V<>clav Haisman, Sebb, Hannes Wellmann, Gary Gregory, Piotr P. Karwasz.
|
||
|
||
Changes
|
||
-------
|
||
|
||
* Bump org.apache.commons:commons-parent from 65 to 67. Thanks to Dependabot.
|
||
* Bump log4j2.version from 2.21.1 to 2.23.1 #187, #230. Thanks to Dependabot, Piotr P. Karwasz.
|
||
* Bump org.slf4j:slf4j-api from 2.0.9 to 2.0.12 #207. Thanks to Dependabot.
|
||
* Bump ch.qos.logback:logback-classic from 1.3.11 to 1.3.14 #212. Thanks to Dependabot, Gary Gregory.
|
||
* Bump ch.qos.logback:logback-core from 1.3.11 to 1.3.14 #211. Thanks to Dependabot, Gary Gregory.
|
||
* Bump com.h3xstream.findsecbugs:findsecbugs-plugin from 1.12.0 to 1.13.0. Thanks to Dependabot.
|
||
* Bump logkit from 1.0.1 to 2.0 #32. Thanks to Dependabot.
|
||
|
||
|
||
Historical list of changes: https://commons.apache.org/proper/commons-logging/changes-report.html
|
||
|
||
Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi
|
||
|
||
For complete information on Apache Commons Logging, including instructions on how to submit bug reports,
|
||
patches, or suggestions for improvement, see the Apache Commons Logging website:
|
||
|
||
https://commons.apache.org/proper/commons-logging/
|
||
|
||
|
||
-----------------------------------------------------------------------------
|
||
|
||
Apache Commons Logging 1.3.0 Release Notes
|
||
------------------------------------------
|
||
|
||
The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.0.
|
||
|
||
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
|
||
well-known logging systems.
|
||
|
||
This is a feature and maintenance release. Java 8 or later is required.
|
||
|
||
Changes in this version include:
|
||
|
||
New features
|
||
------------
|
||
* Add support for Log4j API and SLF4J #177. Thanks to Piotr P. Karwasz.
|
||
* Deprecate org.apache.commons.logging.impl.WeakHashtable without replacement. Thanks to Piotr P. Karwasz.
|
||
* LOGGING-188: Deprecate and disable `Jdk13LumberjackLogger` and `Log4JLogger`. Thanks to Piotr P. Karwasz.
|
||
* LOGGING-173: Deprecate and disable `AvalonLogger` and `LogKitLogger`. Thanks to SingingBush.
|
||
* LOGGING-165: Add Automatic-Module-Name Manifest Header for Java 9 compatibility.
|
||
|
||
Fixed Bugs
|
||
----------
|
||
|
||
* LOGGING-163: BufferedReader is not closed properly. Thanks to Kaloyan Spiridonov.
|
||
* LOGGING-177: Remove redundant initializer #46 Thanks to Arturo Bernal.
|
||
* Use a weak reference for the cached class loader #71. Thanks to Jakob van Kruijssen, Bruno P. Kinoshita, Gary Gregory.
|
||
* Add more entries to .gitignore file #25. Thanks to xiaozhiliaoo.
|
||
* Minor Improvements #34. Thanks to Arturo Bernal.
|
||
* [StepSecurity] ci: Harden GitHub Actions #145. Thanks to step-security-bot, Gary Gregory.
|
||
* LOGGING-185: Replace custom code with `ServiceLoader` call. Thanks to Piotr P. Karwasz.
|
||
* Fix possible NPEs in LogFactoryImpl. Thanks to Gary Gregory.
|
||
* LOGGING-185: Fix failing tests #180. Thanks to Piotr P. Karwasz.
|
||
* Deprecate LogConfigurationException.cause in favor of getCause(). Thanks to Gary Gregory.
|
||
* Fix SpotBugs [ERROR] High: Found reliance on default encoding in org.apache.commons.logging.LogFactory.initDiagnostics(): new java.io.PrintStream(OutputStream) [org.apache.commons.logging.LogFactory] At LogFactory.java:[line 1205] DM_DEFAULT_ENCODING. Thanks to Gary Gregory.
|
||
* Fix SpotBugs [ERROR] Medium: Class org.apache.commons.logging.impl.WeakHashtable defines non-transient non-serializable instance field queue [org.apache.commons.logging.impl.WeakHashtable] In WeakHashtable.java SE_BAD_FIELD. Thanks to Gary Gregory.
|
||
* Set java.logging as optional module #183. Thanks to Piotr P. Karwasz.
|
||
* Fix SpotBugs [ERROR] Medium: Switch statement found in org.apache.commons.logging.impl.SimpleLog.log(int, Object, Throwable) where default case is missing [org.apache.commons.logging.impl.SimpleLog] At SimpleLog.java:[lines 505-522] SF_SWITCH_NO_DEFAULT. Thanks to Gary Gregory.
|
||
* Deprecate org.apache.commons.logging.impl.Jdk13LumberjackLogger.dummyLevel without replacement. Thanks to Gary Gregory.
|
||
|
||
Changes
|
||
-------
|
||
|
||
* Bump Java from 6 to 8. Thanks to Gary Gregory.
|
||
* Bump actions/cache from 2 to 3.0.10 #50, #77, #95, #98, #107, #110. Thanks to Dependabot, Gary Gregory.
|
||
* Bump actions/checkout from 2.3.1 to 3.1.0, #24, #63, #75, #109. Thanks to Dependabot, Gary Gregory.
|
||
* Bump actions/setup-java from 1.4.0 to 3.5.1 #21. Thanks to Dependabot, Gary Gregory.
|
||
* Bump junit from 3.8.1 to 5.9.1 Vintage #23, #38. Thanks to Dependabot, Gary Gregory.
|
||
* Bump clirr-maven-plugin from 2.2.2 to 2.8 #14. Thanks to Dependabot.
|
||
* Bump findbugs-maven-plugin from 2.5.2 to 3.0.5 #8. Thanks to Dependabot.
|
||
* Bump maven-failsafe-plugin from 2.12 to 3.0.0-M7 #31, #91. Thanks to Dependabot, Gary Gregory.
|
||
* Bump spotbugs-surefire-plugin from 2.22.2 to 3.0.0-M5. Thanks to Gary Gregory.
|
||
* Bump maven-dependency-plugin from 2.4 to 3.5.0 #29, #79, #117, #131. Thanks to Dependabot.
|
||
* Bump maven-pmd-plugin from 3.3 to 3.19.0 #28, #90, #100, #103. Thanks to Dependabot.
|
||
* Bump maven-assembly-plugin from 2.5 to 3.4.2 #30, #94, #96. Thanks to Dependabot.
|
||
* Bump servlet-api from 2.3 to 2.5 #27. Thanks to Dependabot.
|
||
* Bump maven-checkstyle-plugin from 2.7 to 3.2.1 #35, #101, #130. Thanks to Gary Gregory, Dependabot.
|
||
* Bump spotbugs-maven-plugin from 4.1.4 to 4.7.2.1 #33, #70, #78, #93, #97, #102, #112. Thanks to Dependabot.
|
||
* Bump spotbugs from 4.5.3 to 4.7.3 #81, #87, #92, #104, #115. Thanks to Dependabot.
|
||
* Bump commons-parent from 52 to 65 #82, #106, #122, #126, #143. Thanks to Dependabot, Gary Gregory.
|
||
* Bump github/codeql-action from 1 to 2 #86. Thanks to Dependabot.
|
||
|
||
|
||
Historical list of changes: https://commons.apache.org/proper/commons-logging/changes-report.html
|
||
|
||
Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi
|
||
|
||
For complete information on Apache Commons Logging, including instructions on how to submit bug reports,
|
||
patches, or suggestions for improvement, see the Apache Commons Logging website:
|
||
|
||
https://commons.apache.org/proper/commons-logging/
|
||
|
||
-----------------------------------------------------------------------------
|
||
|
||
Apache Commons Logging 1.2 Release Notes
|
||
----------------------------------------
|
||
|
||
The Apache Commons Logging team is pleased to announce
|
||
the release of Apache Commons Logging 1.2
|
||
|
||
Apache Commons Logging is a thin adapter allowing configurable
|
||
bridging to other, well-known logging systems.
|
||
|
||
This is a maintenance release containing bug fixes.
|
||
Java 1.2 or later is required.
|
||
|
||
Changes in this version
|
||
-----------------------
|
||
|
||
Fixed Bugs
|
||
----------
|
||
|
||
* LOGGING-37: Improve performance of LogFactory#getFactory() by calling
|
||
Thread#currentThread()#getContextClassLoader() directly instead
|
||
of using reflection. As a consequence support for JDK 1.1 has
|
||
been dropped. Thanks to Matthias Ernst, Archie Cobbs.
|
||
* LOGGING-156: Fix SecurityAllowedTestCase when executed with OpenJDK 1.7 due
|
||
to an additional required RuntimePermission. Thanks to Mikolaj Izdebski.
|
||
* LOGGING-157: Fix javadoc to comply with javadoc tool from jdk 1.8. Thanks to Ville Skyttä.
|
||
|
||
|
||
Historical list of changes: http://commons.apache.org/proper/commons-logging/changes-report.html
|
||
|
||
For complete information on Apache Commons Logging, including instructions on how to submit bug reports,
|
||
patches, or suggestions for improvement, see the Apache Commons Logging website:
|
||
|
||
http://commons.apache.org/proper/commons-logging/
|
||
|
||
-----------------------------------------------------------------------------
|
||
|
||
Apache Commons Logging 1.1.3 Release Notes
|
||
------------------------------------------
|
||
|
||
The Commons Logging team is pleased to announce the release of Apache Commons Logging 1.1.3
|
||
|
||
Commons Logging is a thin adapter allowing configurable bridging to other,
|
||
well known logging systems.
|
||
|
||
This is a maintenance release containing bug fixes.
|
||
|
||
Changes in this version include:
|
||
|
||
Fixed Bugs:
|
||
o LOGGING-151: Use "org.apache.commons.logging" as bundle symbolic name. Thanks to Krzysztof Daniel.
|
||
|
||
Historical list of changes: http://commons.apache.org/proper/commons-logging/changes-report.html
|
||
|
||
For complete information on Commons Logging, including instructions on how to submit bug reports,
|
||
patches, or suggestions for improvement, see the Apache Commons Logging website:
|
||
|
||
http://commons.apache.org/proper/commons-logging/
|
||
|
||
-----------------------------------------------------------------------------
|
||
|
||
Apache Commons Logging 1.1.2 Release Notes
|
||
------------------------------------------
|
||
|
||
The Commons Logging team is pleased to announce the release of Apache Commons Logging 1.1.2
|
||
|
||
Commons Logging is a thin adapter allowing configurable bridging to other,
|
||
well known logging systems.
|
||
|
||
This is a maintenance release containing bug fixes.
|
||
|
||
Changes in this version include:
|
||
|
||
|
||
Fixed Bugs:
|
||
o LOGGING-124: The jar manifest now contains proper OSGi-related metadata information. Thanks to Christian Schneider.
|
||
o LOGGING-144: LogFactory and LogFactoryImpl will not swallow certain errors anymore (ThreadDeath
|
||
and VirtualMachineError). Thanks to Sebastian Bazley.
|
||
o LOGGING-132: Jdk14Logger now correctly uses the specified logger name. Thanks to Nathan Niesen.
|
||
o LOGGING-146: Properly synchronize access to protected static field LogFactory.nullClassLoaderFactory.
|
||
Thanks to Sebastian Bazley.
|
||
o LOGGING-119: Prevent potential deadlock scenario in WeakHashtable. Thanks to Nitzan Niv, Philippe Mouawad.
|
||
o LOGGING-130: Potential missing privileged block for class loader. Thanks to Matthew P. Del Buono.
|
||
o LOGGING-145: LogFactoryImpl.setAttribute - possible NPE.
|
||
o LOGGING-142: Log4JLogger uses deprecated static members of Priority such as INFO. Thanks to Jingguo Yao.
|
||
o LOGGING-128: Static analysis suggests a number of potential improvements. Thanks to Peter Lawrey.
|
||
o LOGGING-147: SimpleLog.log - unsafe update of shortLogName.
|
||
o LOGGING-148: LogFactory.diagnosticPrefix and diagnosticsStream could be final.
|
||
|
||
Changes:
|
||
o LOGGING-135: Improved thread-safety for several log adapters, including AvalonLogger, SimpleLog,
|
||
Log4JLogger, LogKitLogger. Thanks to Sebastian Bazley.
|
||
o LOGGING-138: In case of a discovery failure now also the stacktrace of the cause will be
|
||
added to the diagnostic message. Thanks to Luke Lu.
|
||
o LOGGING-133: Change scope of Jdk14Logger.log(Level, String, Throwable) to protected, allowing
|
||
subclasses to modify the logging output. Thanks to Shevek.
|
||
|
||
|
||
Historical list of changes: http://commons.apache.org/logging/changes-report.html
|
||
|
||
For complete information on Commons Logging, including instructions on how to submit bug reports,
|
||
patches, or suggestions for improvement, see the Apache Commons Logging website:
|
||
|
||
http://commons.apache.org/logging/
|
||
|
||
-----------------------------------------------------------------------------
|
||
|
||
Apache Commons Logging Package 1.1.1 Release Notes
|
||
--------------------------------------------------
|
||
|
||
This release of Apache Commons Logging is a maintenance release, with just a
|
||
couple of fixes for using Commons Logging under restrictive security policies.
|
||
|
||
All core classes were compiled with Maven using a 1.4.x JDK, with target set
|
||
to 1.1 and source set to 1.2. Commons Logging may work on some
|
||
augmented 1.1 series JREs but it is recommended that those wish to run
|
||
on 1.1 JREs download the source and create a custom implementation by
|
||
stripping out all the complex classloader management code.
|
||
|
||
For further details, please see the Apache Commons Logging website:
|
||
http://commons.apache.org/logging/
|
||
|
||
For the very latest news, hints, FAQs etc. please see the
|
||
Apache Commons Logging wiki site:
|
||
http://wiki.apache.org/commons/Logging
|
||
|
||
Note that some containers (some versions of Apache Tomcat and JBoss in
|
||
particular) prevent webapps, ejbs, etc from overriding the commons-logging
|
||
implementation provided by the container. This means that bundling this
|
||
updated implementation with a deployed application may not have any effect.
|
||
See the commons-logging site and/or the wiki for more information.
|
||
|
||
New Features Since 1.1.0
|
||
------------------------
|
||
|
||
None.
|
||
|
||
Incompatibilities
|
||
-----------------
|
||
|
||
The protected method LogFactory.getContextClassLoader has been reverted to pre-1.1
|
||
behaviour. In earlier releases, this method did not use an AccessController when
|
||
obtaining the context classloader. In version 1.1 it did. In this release, it has
|
||
reverted to not using an AccessController; any user-level code that needs to obtain
|
||
a context classloader should itself create an AccessController, and call the
|
||
LogFactory.getContextClassLoader method via the doPrivileged method. This fixes a
|
||
potential security issue, where untrusted code could get access to the context
|
||
classloader if a signed Commons Logging library was in the classpath.
|
||
|
||
Dependencies
|
||
------------
|
||
|
||
Commons Logging has no mandatory dependencies.
|
||
|
||
Java 1.2 and later are supported. It may be possible to use this release with
|
||
java 1.1 but this has not been tested; the unit tests certainly don't run on
|
||
that version.
|
||
|
||
Distributed Jar Files
|
||
---------------------
|
||
|
||
File commons-logging-nn.jar is the one most people will want. It provides the
|
||
base implementation and adapters to a number of popular logging libraries.
|
||
|
||
File commons-logging-adapters-nn.jar includes only the adapters to various
|
||
concrete logging libraries. When commons-logging-nn.jar or
|
||
commons-logging-api-nn.jar is deployed in a container classpath, then this
|
||
adapters-only jar file should be deployed in the webapp, not the complete Commons
|
||
Logging distribution. This ensures that the core Log/LogFactory classes are only
|
||
deployed via one classloader, thus avoiding "Log4JLogger does not implement Log"
|
||
and similar problems.
|
||
|
||
File commons-logging-api-nn.jar provides minimal adapters to external logging
|
||
libraries, just the internally implemented SimpleLog and NoOpLog classes
|
||
plus Jdk14Logger (which is currently required by Apache Tomcat).
|
||
|
||
The file commons-logging-api-nn.jar may be used as a declared dependency for
|
||
projects that care about "transitive dependencies" and can't handle jar files
|
||
such as commons-logging-nn.jar which have "optional" dependencies depending on
|
||
how they are used. In addition, this jar file can be useful for "rebundlers" of
|
||
Commons Logging who recompile the source-code but who may not be able to
|
||
recompile against the full set of supported adapters; such projects should be
|
||
able to at least recreate an equivalent of this jar file.
|
||
|
||
General Notes
|
||
-------------
|
||
|
||
The Apache Commons project has migrated to the Subversion version control system
|
||
(previously, CVS was used). There should be no effect on users of the Commons
|
||
Logging library, but obviously the process of examining the latest source code,
|
||
and of creating patches for Commons Logging has now changed. Please see the
|
||
Apache Commons website for details (http://commons.apache.org/).
|
||
|
||
The Apache Commons project has now moved to using the Apache JIRA installation
|
||
as its bugtracking system (formerly, the Apache Bugzilla installation was used).
|
||
|
||
All source files for this release have been updated to reflect the new Apache
|
||
Software Foundation licensing rules. The terms and conditions are unaltered;
|
||
this merely affects how those are presented in the source files. See
|
||
http://www.apache.org/legal/src-headers.html
|
||
|
||
This release can be built/tested with Maven 2.0.x as well as Ant. Note that
|
||
building with Maven 1.x is no longer supported. The files used to build Commons
|
||
Logging with Maven 1.x will be removed in a future version of Commons Logging.
|
||
|
||
Bugs Fixed
|
||
----------
|
||
|
||
* LOGGING-106: Commons Logging 1.1 was completely unusable under a security
|
||
policy that prevented access to system properties. Even signing/authorising
|
||
the Commons Logging library was not sufficient. This has been fixed by (a)
|
||
catching SecurityException and falling back to a sensible default, and (b)
|
||
using AccessController so Commons Logging can be granted privileges without
|
||
needing the caller to have them too.
|
||
|
||
* LOGGING-107: Commons Logging 1.1 auto-discovery failed under a security
|
||
policy that prevented calls to ClassLoader.getParent. Signing/authorising the
|
||
Commons Logging library was not sufficient as an AccessController was not used.
|
||
This has been fixed by catching SecurityException and using an AccessController.
|
||
|
||
* LOGGING-111, LOGGING-114: Show the contents of chained exceptions, to make
|
||
debugging easier, in particular when using Commons Logging together with Log4J.
|
||
|
||
* LOGGING-113: pom.xml in maven repository does not list dependencies as optional.
|
||
|
||
* LOGGING-115: NPE thrown due to exception message logging.
|
||
|
||
* LOGGING-117: Unit tests fail on linux with java16.
|
||
|
||
* LOGGING-118: Generate source and binary archives.
|
||
|
||
* MEV-392 (http://jira.codehaus.org/browse/MEV-392)
|
||
As Commons Logging didn't provide a Maven2 pom.xml file, one was helpfully
|
||
created by people not involved with the commons-logging project and published
|
||
to the standard maven repositories. Unfortunately this pom declared normal
|
||
dependencies on all the logging libraries that are supported by the core
|
||
Commons Logging distribution, meaning they all get pulled into a project that
|
||
declares a dependency on Commons Logging 1.1. This release now provides an
|
||
"official" pom.xml which declares these dependencies as optional so they aren't
|
||
automatically included in projects that depend on Commons Logging 1.1.1.
|
||
|
||
* (no bug#): Fix thread-safety bug (SimpleDateFormat.format is not thread-safe).
|
||
Thanks to Martin Wilson of bright-interactive for the bug report.
|
||
|
||
* (no bug#): Security issue regarding access to context classloader (see
|
||
incompatibilities section above).
|
||
|
||
DEPRECATIONS
|
||
------------
|
||
|
||
(These are carried forward from Version 1.0.4)
|
||
|
||
[LogSource] Previously deprecated, replaced by LogFactory.
|
||
|
||
-----------------------------------------------------------------------------
|
||
|
||
Apache Commons Logging 1.0.4 Release Notes
|
||
------------------------------------------
|
||
|
||
This document contains the release notes for this version of the Commons
|
||
Logging package. It is primarily a service release for downstream users.
|
||
The main emphasis maintenance and code cleanup release,
|
||
with some new features including support for both the old 1.2.x series
|
||
of Log4J releases and the new 1.3.x series of releases.
|
||
|
||
The following paragraphs document changes since the previous release
|
||
(version 1.0.3). The documentation (userguide and javadoc)
|
||
has also been improved.
|
||
|
||
New Features
|
||
------------
|
||
|
||
[ALL FILES] This version of Commons Logging is released under the
|
||
Apache License (Version 2.0). All source files have been
|
||
modified to reflect this.
|
||
|
||
[maven.xml] Added beginnings of a Maven-based build, primarily for the
|
||
purpose of creating documentation consistent with Mavenized
|
||
commons projects. The official build system for the software
|
||
is still the Ant "build.xml" file.
|
||
|
||
[AvalonLogger] Added AvalonLogger, which wraps the logger used by the
|
||
Avalon framework. As with other implementations, this
|
||
is compiled only if the appropriate dependencies are
|
||
satisfied.
|
||
|
||
[Jdk13LumberjackLogger]
|
||
Added Jdk13LumberjackLogger, which wraps the implementation
|
||
of the JSR-47 logging APIs (for JDKs before 1.4) provided
|
||
by the SourceForge "lumberjack" project.
|
||
<http://sourceforge.net/projects/lumberjack/>
|
||
|
||
[LogFactoryImpl] If an InvocationTargetException is returned during the
|
||
creation of a new Log instance, unwrap the underlying
|
||
cause and pass it in to the LogConfigurationException
|
||
constructor. This will make the actual cause of the
|
||
problem easier to diagnose.
|
||
|
||
[LogFactoryImpl] If the isAssignableFrom() test fails because there is more
|
||
than one instance of org.apache.commons.logging.Log visible
|
||
in the class loader hierarchy, make the exception message
|
||
that is reported explicitly state this, rather than the
|
||
potentially misleading claim that an implementation class
|
||
does not implement Log.
|
||
|
||
[Log4JLogger] Changes to allow this logger to support both the existing 1.2.x
|
||
series of releases and also the upcoming 1.3.x series of Log4J
|
||
releases.
|
||
|
||
[SimpleLog] Added support for setting date-time format.
|
||
|
||
Bug Fixes
|
||
---------
|
||
|
||
[MANIFEST.MF] Remove reference to Log4J from the manifest classpath.
|
||
|
||
[LogConfigurationException]
|
||
Include root cause in the text of the message, if present.
|
||
|
||
[LogFactory] Improve usability of error messages reporting
|
||
configuration problems.
|
||
|
||
[JDK14Logger] Implement Serializable, remove "final" declaration for
|
||
easy subclassing.
|
||
|
||
[Log4JLogger] Implement Serializable, remove "final" declaration for
|
||
easy subclassing.
|
||
|
||
[NoOpLogger] Implement Serializable, remove "final" declaration for
|
||
easy subclassing.
|
||
|
||
[SimpleLog] Make SimpleLog more friendly to the security manager
|
||
in an applet environment, by swallowing any security
|
||
exceptions when looking up system properties that are
|
||
not accessible.
|
||
|
||
Deprecations
|
||
------------
|
||
|
||
(These are carried forward from Version 1.0.3)
|
||
|
||
[LogSource] Previously deprecated, replaced by LogFactory.
|
||
|
||
[Log4jFactory] A proxy instance of this class was transparently created
|
||
when Log4J logging was selected, yet it serves no useful
|
||
purpose. The class is now deprecated, and the proxy
|
||
instance is no longer created.
|
||
|
||
[Log4JCategoryLog] This class has been replaced by Log4JLogger, which
|
||
corresponds to the availability of the new Logger class
|
||
in Log4J 1.2 and later.
|
||
|
||
-----------------------------------------------------------------------------
|
||
|
||
Apache Commons Logging 1.0.3 Release Notes
|
||
------------------------------------------
|
||
|
||
This document contains the release notes for this version of the Commons
|
||
Logging package. It is primarily a maintenance and code cleanup release,
|
||
with minimal new features.
|
||
|
||
The following paragraphs document changes since the previous release
|
||
(version 1.0.2).
|
||
|
||
New Features
|
||
------------
|
||
|
||
[build.xml] Refined build process to correctly avoid compiling classes
|
||
when dependencies are not available, and to avoid name
|
||
clashes over Ant properties used in different ways.
|
||
|
||
[unit tests] Added new suites of tests for the Log4J and JDK 1.4
|
||
logging implementations, including tests with multiple
|
||
class loaders that closely simulate the scenario of using
|
||
commons-logging in a servlet container.
|
||
|
||
[documentation] Overall cleanup and correction of the JavaDoc documentation
|
||
to correctly reflect the current behavior. In particular,
|
||
the default logging implementation (selected if nothing
|
||
else is configured) is now SimpleLog, not NoOpLog.
|
||
|
||
[LogFactory] Add a static release(ClassLoader) method that allows,
|
||
for example, a webapp to clean up all c-l references
|
||
prior to being shut down.
|
||
|
||
Bug Fixes
|
||
---------
|
||
|
||
[build.xml] Correct the META-INF/MANIFEST.MF that was embedded in the
|
||
generated JAR files to properly contain the version number.
|
||
|
||
[LogFactory] Fix security violations on several ClassLoader method
|
||
invocations.
|
||
|
||
[SimpleLog] Dump stack trace through logger, instead of directly to
|
||
System.out, to preserve output sequence.
|
||
|
||
[SimpleLog] Avoid a security exception if system properties cannot be
|
||
read (such as in an applet).
|
||
|
||
[Bugzilla 10825] NullPointerException when Logger.getClassLoader()
|
||
returns null.
|
||
|
||
[Bugzilla 13118] Correct detection of JDK 1.4 that was mis-identifying on a
|
||
scenario where a JDK 1.3 implementation included an
|
||
implementation of JSR-47 logging.
|
||
|
||
[Bugzilla 13157] Incorrect selection of Log4J in a servlet container.
|
||
|
||
[Bugzilla 13201] Log4JLogger should not attempt to auto-configure
|
||
appenders; this is out of scope for commons-logging.
|
||
|
||
[Bugzilla 17561] Attempts to override Log4J configuration.
|
||
|
||
[Bugzilla 17894] Unable to configure commons-logging SimpleLog for a webapp.
|
||
|
||
[Bugzilla 18184] Jdk14Logger should not waste the effort to create a
|
||
Throwable (to extract calling class and method) if the
|
||
message is not going to be logged anyway.
|
||
|
||
|
||
Deprecations
|
||
------------
|
||
|
||
[LogSource] Previously deprecated, replaced by LogFactory.
|
||
|
||
[Log4jFactory] A proxy instance of this class was transparently created
|
||
when Log4J logging was selected, yet it serves no useful
|
||
purpose. The class is now deprecated, and the proxy
|
||
instance is no longer created.
|
||
|
||
[Log4JCategoryLog] This class has been replaced by Log4JLogger, which
|
||
corresponds to the availability of the new Logger class
|
||
in Log4J 1.2 and later.
|
||
|
||
-----------------------------------------------------------------------------
|
||
|
||
Apache Commons Logging Package 1.0 Release Notes
|
||
------------------------------------------------
|
||
|
||
This document contains the release notes for this version of the Commons
|
||
Logging package. This is the first release of commons-logging.
|
||
|
||
New Features
|
||
------------
|
||
|
||
* commons-logging implements an abstraction between logging and the logging
|
||
implementation being used. You can currently use Avalon's logkit, Log4J,
|
||
JDK 1.4's logging, or nothing at all. It is up to you.
|
||
|
||
-----------------------------------------------------------------------------
|