-
Notifications
You must be signed in to change notification settings - Fork 128
/
RELEASE-NOTES.txt
684 lines (476 loc) · 31.1 KB
/
RELEASE-NOTES.txt
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60
61
62
63
64
65
66
67
68
69
70
71
72
73
74
75
76
77
78
79
80
81
82
83
84
85
86
87
88
89
90
91
92
93
94
95
96
97
98
99
100
101
102
103
104
105
106
107
108
109
110
111
112
113
114
115
116
117
118
119
120
121
122
123
124
125
126
127
128
129
130
131
132
133
134
135
136
137
138
139
140
141
142
143
144
145
146
147
148
149
150
151
152
153
154
155
156
157
158
159
160
161
162
163
164
165
166
167
168
169
170
171
172
173
174
175
176
177
178
179
180
181
182
183
184
185
186
187
188
189
190
191
192
193
194
195
196
197
198
199
200
201
202
203
204
205
206
207
208
209
210
211
212
213
214
215
216
217
218
219
220
221
222
223
224
225
226
227
228
229
230
231
232
233
234
235
236
237
238
239
240
241
242
243
244
245
246
247
248
249
250
251
252
253
254
255
256
257
258
259
260
261
262
263
264
265
266
267
268
269
270
271
272
273
274
275
276
277
278
279
280
281
282
283
284
285
286
287
288
289
290
291
292
293
294
295
296
297
298
299
300
301
302
303
304
305
306
307
308
309
310
311
312
313
314
315
316
317
318
319
320
321
322
323
324
325
326
327
328
329
330
331
332
333
334
335
336
337
338
339
340
341
342
343
344
345
346
347
348
349
350
351
352
353
354
355
356
357
358
359
360
361
362
363
364
365
366
367
368
369
370
371
372
373
374
375
376
377
378
379
380
381
382
383
384
385
386
387
388
389
390
391
392
393
394
395
396
397
398
399
400
401
402
403
404
405
406
407
408
409
410
411
412
413
414
415
416
417
418
419
420
421
422
423
424
425
426
427
428
429
430
431
432
433
434
435
436
437
438
439
440
441
442
443
444
445
446
447
448
449
450
451
452
453
454
455
456
457
458
459
460
461
462
463
464
465
466
467
468
469
470
471
472
473
474
475
476
477
478
479
480
481
482
483
484
485
486
487
488
489
490
491
492
493
494
495
496
497
498
499
500
501
502
503
504
505
506
507
508
509
510
511
512
513
514
515
516
517
518
519
520
521
522
523
524
525
526
527
528
529
530
531
532
533
534
535
536
537
538
539
540
541
542
543
544
545
546
547
548
549
550
551
552
553
554
555
556
557
558
559
560
561
562
563
564
565
566
567
568
569
570
571
572
573
574
575
576
577
578
579
580
581
582
583
584
585
586
587
588
589
590
591
592
593
594
595
596
597
598
599
600
601
602
603
604
605
606
607
608
609
610
611
612
613
614
615
616
617
618
619
620
621
622
623
624
625
626
627
628
629
630
631
632
633
634
635
636
637
638
639
640
641
642
643
644
645
646
647
648
649
650
651
652
653
654
655
656
657
658
659
660
661
662
663
664
665
666
667
668
669
670
671
672
673
674
675
676
677
678
679
680
681
682
683
684
Apache Commons Logging 1.3.4 Release Notes
------------------------------------------
The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.4.
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
well-known logging systems.
This is a feature and maintenance release. Java 8 or later is required.
Changes in this version
-----------------------
Fixed Bugs
----------
* LOGGING-192: Fix factory loading from context class loader #280, #281. Thanks to Björn Kautler, Piotr Karwasz.
Changes
-------
* Bump org.apache.commons:commons-parent from 71 to 72. Thanks to Gary Gregory.
* Bump org.slf4j:slf4j-api from 2.0.13 to 2.0.16 #276, #282. Thanks to Gary Gregory, Dependabot.
Historical list of changes: https://commons.apache.org/proper/commons-logging/changes-report.html
Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi
For complete information on Apache Commons Logging, including instructions on how to submit bug reports,
patches, or suggestions for improvement, see the Apache Commons Logging website:
https://commons.apache.org/proper/commons-logging/
-----------------------------------------------------------------------------
Apache Commons Logging 1.3.3 Release Notes
------------------------------------------
The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.3.
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
well-known logging systems.
This is a feature and maintenance release. Java 8 or later is required.
Fixed Bugs
----------
* LOGGING-193: Update Log4j 2 OSGi imports #268. Thanks to Philippe Marschall.
* Fix PMD UnnecessaryFullyQualifiedName in SimpleLog. Thanks to Gary Gregory.
* Fix NullPointerException in SimpleLog#write(Object) on null input. Thanks to Gary Gregory.
* Fix NullPointerException in SimpleLog#write(StringBuffer) on null input. Thanks to Gary Gregory.
Changes
-------
* Bump org.apache.commons:commons-parent from 69 to 71 #267. Thanks to Dependabot.
Historical list of changes: https://commons.apache.org/proper/commons-logging/changes-report.html
Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi
For complete information on Apache Commons Logging, including instructions on how to submit bug reports,
patches, or suggestions for improvement, see the Apache Commons Logging website:
https://commons.apache.org/proper/commons-logging/
-----------------------------------------------------------------------------
Apache Commons Logging 1.3.2 Release Notes
------------------------------------------
The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.2.
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
well-known logging systems.
This is a feature and maintenance release. Java 8 or later is required.
Changes in this version
-----------------------
Fixed Bugs
----------
* LOGGING-190: Add OSGi metadata to enable Service Loader Mediator #234. Thanks to Hannes Wellmann, Gary Gregory, Johan Compagner.
* LOGGING-191: Apache commons logging shows 1.4 as latest release instead of 1.3.1. Thanks to Hannes Wellmann, Gary Gregory, Johan Compagner.
* Deprecate org.apache.commons.logging.LogSource.jdk14IsAvailable. Thanks to Gary Gregory.
Changes
-------
* Bump org.apache.commons:commons-parent from 67 to 69 #240. Thanks to Dependabot.
* Bump org.slf4j:slf4j-api from 2.0.12 to 2.0.13 #248. Thanks to Dependabot.
Historical list of changes: https://commons.apache.org/proper/commons-logging/changes-report.html
Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi
For complete information on Apache Commons Logging, including instructions on how to submit bug reports,
patches, or suggestions for improvement, see the Apache Commons Logging website:
https://commons.apache.org/proper/commons-logging/
-----------------------------------------------------------------------------
Apache Commons Logging 1.3.1 Release Notes
------------------------------------------
The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.1.
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
well-known logging systems.
This is a feature and maintenance release. Java 8 or later is required.
Changes in this version
-----------------------
New features
------------
* Add Maven property project.build.outputTimestamp for build reproducibility. Thanks to Gary Gregory.
Fixed Bugs
----------
* Remove references to very old JDK and Commons Logging versions #201. Thanks to Elliotte Rusty Harold.
* Update from Logj 1 to the Log4j 2 API compatibility layer #231. Thanks to Gary Gregory, Piotr P. Karwasz.
* Allow Servlet 4 in OSGi environment #191. Thanks to Václav Haisman.
* Fix generics warnings #213. Thanks to Elliotte Rusty Harold.
* LOGGING-189: Fix Import-Package entry for org.slf4j #188. Thanks to Václav Haisman, Sebb, Hannes Wellmann, Gary Gregory, Piotr P. Karwasz.
Changes
-------
* Bump org.apache.commons:commons-parent from 65 to 67. Thanks to Dependabot.
* Bump log4j2.version from 2.21.1 to 2.23.1 #187, #230. Thanks to Dependabot, Piotr P. Karwasz.
* Bump org.slf4j:slf4j-api from 2.0.9 to 2.0.12 #207. Thanks to Dependabot.
* Bump ch.qos.logback:logback-classic from 1.3.11 to 1.3.14 #212. Thanks to Dependabot, Gary Gregory.
* Bump ch.qos.logback:logback-core from 1.3.11 to 1.3.14 #211. Thanks to Dependabot, Gary Gregory.
* Bump com.h3xstream.findsecbugs:findsecbugs-plugin from 1.12.0 to 1.13.0. Thanks to Dependabot.
* Bump logkit from 1.0.1 to 2.0 #32. Thanks to Dependabot.
Historical list of changes: https://commons.apache.org/proper/commons-logging/changes-report.html
Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi
For complete information on Apache Commons Logging, including instructions on how to submit bug reports,
patches, or suggestions for improvement, see the Apache Commons Logging website:
https://commons.apache.org/proper/commons-logging/
-----------------------------------------------------------------------------
Apache Commons Logging 1.3.0 Release Notes
------------------------------------------
The Apache Commons Logging team is pleased to announce the release of Apache Commons Logging 1.3.0.
Apache Commons Logging is a thin adapter allowing configurable bridging to other,
well-known logging systems.
This is a feature and maintenance release. Java 8 or later is required.
Changes in this version include:
New features
------------
* Add support for Log4j API and SLF4J #177. Thanks to Piotr P. Karwasz.
* Deprecate org.apache.commons.logging.impl.WeakHashtable without replacement. Thanks to Piotr P. Karwasz.
* LOGGING-188: Deprecate and disable `Jdk13LumberjackLogger` and `Log4JLogger`. Thanks to Piotr P. Karwasz.
* LOGGING-173: Deprecate and disable `AvalonLogger` and `LogKitLogger`. Thanks to SingingBush.
* LOGGING-165: Add Automatic-Module-Name Manifest Header for Java 9 compatibility.
Fixed Bugs
----------
* LOGGING-163: BufferedReader is not closed properly. Thanks to Kaloyan Spiridonov.
* LOGGING-177: Remove redundant initializer #46 Thanks to Arturo Bernal.
* Use a weak reference for the cached class loader #71. Thanks to Jakob van Kruijssen, Bruno P. Kinoshita, Gary Gregory.
* Add more entries to .gitignore file #25. Thanks to xiaozhiliaoo.
* Minor Improvements #34. Thanks to Arturo Bernal.
* [StepSecurity] ci: Harden GitHub Actions #145. Thanks to step-security-bot, Gary Gregory.
* LOGGING-185: Replace custom code with `ServiceLoader` call. Thanks to Piotr P. Karwasz.
* Fix possible NPEs in LogFactoryImpl. Thanks to Gary Gregory.
* LOGGING-185: Fix failing tests #180. Thanks to Piotr P. Karwasz.
* Deprecate LogConfigurationException.cause in favor of getCause(). Thanks to Gary Gregory.
* Fix SpotBugs [ERROR] High: Found reliance on default encoding in org.apache.commons.logging.LogFactory.initDiagnostics(): new java.io.PrintStream(OutputStream) [org.apache.commons.logging.LogFactory] At LogFactory.java:[line 1205] DM_DEFAULT_ENCODING. Thanks to Gary Gregory.
* Fix SpotBugs [ERROR] Medium: Class org.apache.commons.logging.impl.WeakHashtable defines non-transient non-serializable instance field queue [org.apache.commons.logging.impl.WeakHashtable] In WeakHashtable.java SE_BAD_FIELD. Thanks to Gary Gregory.
* Set java.logging as optional module #183. Thanks to Piotr P. Karwasz.
* Fix SpotBugs [ERROR] Medium: Switch statement found in org.apache.commons.logging.impl.SimpleLog.log(int, Object, Throwable) where default case is missing [org.apache.commons.logging.impl.SimpleLog] At SimpleLog.java:[lines 505-522] SF_SWITCH_NO_DEFAULT. Thanks to Gary Gregory.
* Deprecate org.apache.commons.logging.impl.Jdk13LumberjackLogger.dummyLevel without replacement. Thanks to Gary Gregory.
Changes
-------
* Bump Java from 6 to 8. Thanks to Gary Gregory.
* Bump actions/cache from 2 to 3.0.10 #50, #77, #95, #98, #107, #110. Thanks to Dependabot, Gary Gregory.
* Bump actions/checkout from 2.3.1 to 3.1.0, #24, #63, #75, #109. Thanks to Dependabot, Gary Gregory.
* Bump actions/setup-java from 1.4.0 to 3.5.1 #21. Thanks to Dependabot, Gary Gregory.
* Bump junit from 3.8.1 to 5.9.1 Vintage #23, #38. Thanks to Dependabot, Gary Gregory.
* Bump clirr-maven-plugin from 2.2.2 to 2.8 #14. Thanks to Dependabot.
* Bump findbugs-maven-plugin from 2.5.2 to 3.0.5 #8. Thanks to Dependabot.
* Bump maven-failsafe-plugin from 2.12 to 3.0.0-M7 #31, #91. Thanks to Dependabot, Gary Gregory.
* Bump spotbugs-surefire-plugin from 2.22.2 to 3.0.0-M5. Thanks to Gary Gregory.
* Bump maven-dependency-plugin from 2.4 to 3.5.0 #29, #79, #117, #131. Thanks to Dependabot.
* Bump maven-pmd-plugin from 3.3 to 3.19.0 #28, #90, #100, #103. Thanks to Dependabot.
* Bump maven-assembly-plugin from 2.5 to 3.4.2 #30, #94, #96. Thanks to Dependabot.
* Bump servlet-api from 2.3 to 2.5 #27. Thanks to Dependabot.
* Bump maven-checkstyle-plugin from 2.7 to 3.2.1 #35, #101, #130. Thanks to Gary Gregory, Dependabot.
* Bump spotbugs-maven-plugin from 4.1.4 to 4.7.2.1 #33, #70, #78, #93, #97, #102, #112. Thanks to Dependabot.
* Bump spotbugs from 4.5.3 to 4.7.3 #81, #87, #92, #104, #115. Thanks to Dependabot.
* Bump commons-parent from 52 to 65 #82, #106, #122, #126, #143. Thanks to Dependabot, Gary Gregory.
* Bump github/codeql-action from 1 to 2 #86. Thanks to Dependabot.
Historical list of changes: https://commons.apache.org/proper/commons-logging/changes-report.html
Download it from https://commons.apache.org/proper/commons-logging/download_logging.cgi
For complete information on Apache Commons Logging, including instructions on how to submit bug reports,
patches, or suggestions for improvement, see the Apache Commons Logging website:
https://commons.apache.org/proper/commons-logging/
-----------------------------------------------------------------------------
Apache Commons Logging 1.2 Release Notes
----------------------------------------
The Apache Commons Logging team is pleased to announce
the release of Apache Commons Logging 1.2
Apache Commons Logging is a thin adapter allowing configurable
bridging to other, well-known logging systems.
This is a maintenance release containing bug fixes.
Java 1.2 or later is required.
Changes in this version
-----------------------
Fixed Bugs
----------
* LOGGING-37: Improve performance of LogFactory#getFactory() by calling
Thread#currentThread()#getContextClassLoader() directly instead
of using reflection. As a consequence support for JDK 1.1 has
been dropped. Thanks to Matthias Ernst, Archie Cobbs.
* LOGGING-156: Fix SecurityAllowedTestCase when executed with OpenJDK 1.7 due
to an additional required RuntimePermission. Thanks to Mikolaj Izdebski.
* LOGGING-157: Fix javadoc to comply with javadoc tool from jdk 1.8. Thanks to Ville Skyttä.
Historical list of changes: http://commons.apache.org/proper/commons-logging/changes-report.html
For complete information on Apache Commons Logging, including instructions on how to submit bug reports,
patches, or suggestions for improvement, see the Apache Commons Logging website:
http://commons.apache.org/proper/commons-logging/
-----------------------------------------------------------------------------
Apache Commons Logging 1.1.3 Release Notes
------------------------------------------
The Commons Logging team is pleased to announce the release of Apache Commons Logging 1.1.3
Commons Logging is a thin adapter allowing configurable bridging to other,
well known logging systems.
This is a maintenance release containing bug fixes.
Changes in this version include:
Fixed Bugs:
o LOGGING-151: Use "org.apache.commons.logging" as bundle symbolic name. Thanks to Krzysztof Daniel.
Historical list of changes: http://commons.apache.org/proper/commons-logging/changes-report.html
For complete information on Commons Logging, including instructions on how to submit bug reports,
patches, or suggestions for improvement, see the Apache Commons Logging website:
http://commons.apache.org/proper/commons-logging/
-----------------------------------------------------------------------------
Apache Commons Logging 1.1.2 Release Notes
------------------------------------------
The Commons Logging team is pleased to announce the release of Apache Commons Logging 1.1.2
Commons Logging is a thin adapter allowing configurable bridging to other,
well known logging systems.
This is a maintenance release containing bug fixes.
Changes in this version include:
Fixed Bugs:
o LOGGING-124: The jar manifest now contains proper OSGi-related metadata information. Thanks to Christian Schneider.
o LOGGING-144: LogFactory and LogFactoryImpl will not swallow certain errors anymore (ThreadDeath
and VirtualMachineError). Thanks to Sebastian Bazley.
o LOGGING-132: Jdk14Logger now correctly uses the specified logger name. Thanks to Nathan Niesen.
o LOGGING-146: Properly synchronize access to protected static field LogFactory.nullClassLoaderFactory.
Thanks to Sebastian Bazley.
o LOGGING-119: Prevent potential deadlock scenario in WeakHashtable. Thanks to Nitzan Niv, Philippe Mouawad.
o LOGGING-130: Potential missing privileged block for class loader. Thanks to Matthew P. Del Buono.
o LOGGING-145: LogFactoryImpl.setAttribute - possible NPE.
o LOGGING-142: Log4JLogger uses deprecated static members of Priority such as INFO. Thanks to Jingguo Yao.
o LOGGING-128: Static analysis suggests a number of potential improvements. Thanks to Peter Lawrey.
o LOGGING-147: SimpleLog.log - unsafe update of shortLogName.
o LOGGING-148: LogFactory.diagnosticPrefix and diagnosticsStream could be final.
Changes:
o LOGGING-135: Improved thread-safety for several log adapters, including AvalonLogger, SimpleLog,
Log4JLogger, LogKitLogger. Thanks to Sebastian Bazley.
o LOGGING-138: In case of a discovery failure now also the stacktrace of the cause will be
added to the diagnostic message. Thanks to Luke Lu.
o LOGGING-133: Change scope of Jdk14Logger.log(Level, String, Throwable) to protected, allowing
subclasses to modify the logging output. Thanks to Shevek.
Historical list of changes: http://commons.apache.org/logging/changes-report.html
For complete information on Commons Logging, including instructions on how to submit bug reports,
patches, or suggestions for improvement, see the Apache Commons Logging website:
http://commons.apache.org/logging/
-----------------------------------------------------------------------------
Apache Commons Logging Package 1.1.1 Release Notes
--------------------------------------------------
This release of Apache Commons Logging is a maintenance release, with just a
couple of fixes for using Commons Logging under restrictive security policies.
All core classes were compiled with Maven using a 1.4.x JDK, with target set
to 1.1 and source set to 1.2. Commons Logging may work on some
augmented 1.1 series JREs but it is recommended that those wish to run
on 1.1 JREs download the source and create a custom implementation by
stripping out all the complex classloader management code.
For further details, please see the Apache Commons Logging website:
http://commons.apache.org/logging/
For the very latest news, hints, FAQs etc. please see the
Apache Commons Logging wiki site:
http://wiki.apache.org/commons/Logging
Note that some containers (some versions of Apache Tomcat and JBoss in
particular) prevent webapps, ejbs, etc from overriding the commons-logging
implementation provided by the container. This means that bundling this
updated implementation with a deployed application may not have any effect.
See the commons-logging site and/or the wiki for more information.
New Features Since 1.1.0
------------------------
None.
Incompatibilities
-----------------
The protected method LogFactory.getContextClassLoader has been reverted to pre-1.1
behaviour. In earlier releases, this method did not use an AccessController when
obtaining the context classloader. In version 1.1 it did. In this release, it has
reverted to not using an AccessController; any user-level code that needs to obtain
a context classloader should itself create an AccessController, and call the
LogFactory.getContextClassLoader method via the doPrivileged method. This fixes a
potential security issue, where untrusted code could get access to the context
classloader if a signed Commons Logging library was in the classpath.
Dependencies
------------
Commons Logging has no mandatory dependencies.
Java 1.2 and later are supported. It may be possible to use this release with
java 1.1 but this has not been tested; the unit tests certainly don't run on
that version.
Distributed Jar Files
---------------------
File commons-logging-nn.jar is the one most people will want. It provides the
base implementation and adapters to a number of popular logging libraries.
File commons-logging-adapters-nn.jar includes only the adapters to various
concrete logging libraries. When commons-logging-nn.jar or
commons-logging-api-nn.jar is deployed in a container classpath, then this
adapters-only jar file should be deployed in the webapp, not the complete Commons
Logging distribution. This ensures that the core Log/LogFactory classes are only
deployed via one classloader, thus avoiding "Log4JLogger does not implement Log"
and similar problems.
File commons-logging-api-nn.jar provides minimal adapters to external logging
libraries, just the internally implemented SimpleLog and NoOpLog classes
plus Jdk14Logger (which is currently required by Apache Tomcat).
The file commons-logging-api-nn.jar may be used as a declared dependency for
projects that care about "transitive dependencies" and can't handle jar files
such as commons-logging-nn.jar which have "optional" dependencies depending on
how they are used. In addition, this jar file can be useful for "rebundlers" of
Commons Logging who recompile the source-code but who may not be able to
recompile against the full set of supported adapters; such projects should be
able to at least recreate an equivalent of this jar file.
General Notes
-------------
The Apache Commons project has migrated to the Subversion version control system
(previously, CVS was used). There should be no effect on users of the Commons
Logging library, but obviously the process of examining the latest source code,
and of creating patches for Commons Logging has now changed. Please see the
Apache Commons website for details (http://commons.apache.org/).
The Apache Commons project has now moved to using the Apache JIRA installation
as its bugtracking system (formerly, the Apache Bugzilla installation was used).
All source files for this release have been updated to reflect the new Apache
Software Foundation licensing rules. The terms and conditions are unaltered;
this merely affects how those are presented in the source files. See
http://www.apache.org/legal/src-headers.html
This release can be built/tested with Maven 2.0.x as well as Ant. Note that
building with Maven 1.x is no longer supported. The files used to build Commons
Logging with Maven 1.x will be removed in a future version of Commons Logging.
Bugs Fixed
----------
* LOGGING-106: Commons Logging 1.1 was completely unusable under a security
policy that prevented access to system properties. Even signing/authorising
the Commons Logging library was not sufficient. This has been fixed by (a)
catching SecurityException and falling back to a sensible default, and (b)
using AccessController so Commons Logging can be granted privileges without
needing the caller to have them too.
* LOGGING-107: Commons Logging 1.1 auto-discovery failed under a security
policy that prevented calls to ClassLoader.getParent. Signing/authorising the
Commons Logging library was not sufficient as an AccessController was not used.
This has been fixed by catching SecurityException and using an AccessController.
* LOGGING-111, LOGGING-114: Show the contents of chained exceptions, to make
debugging easier, in particular when using Commons Logging together with Log4J.
* LOGGING-113: pom.xml in maven repository does not list dependencies as optional.
* LOGGING-115: NPE thrown due to exception message logging.
* LOGGING-117: Unit tests fail on linux with java16.
* LOGGING-118: Generate source and binary archives.
* MEV-392 (http://jira.codehaus.org/browse/MEV-392)
As Commons Logging didn't provide a Maven2 pom.xml file, one was helpfully
created by people not involved with the commons-logging project and published
to the standard maven repositories. Unfortunately this pom declared normal
dependencies on all the logging libraries that are supported by the core
Commons Logging distribution, meaning they all get pulled into a project that
declares a dependency on Commons Logging 1.1. This release now provides an
"official" pom.xml which declares these dependencies as optional so they aren't
automatically included in projects that depend on Commons Logging 1.1.1.
* (no bug#): Fix thread-safety bug (SimpleDateFormat.format is not thread-safe).
Thanks to Martin Wilson of bright-interactive for the bug report.
* (no bug#): Security issue regarding access to context classloader (see
incompatibilities section above).
DEPRECATIONS
------------
(These are carried forward from Version 1.0.4)
[LogSource] Previously deprecated, replaced by LogFactory.
-----------------------------------------------------------------------------
Apache Commons Logging 1.0.4 Release Notes
------------------------------------------
This document contains the release notes for this version of the Commons
Logging package. It is primarily a service release for downstream users.
The main emphasis maintenance and code cleanup release,
with some new features including support for both the old 1.2.x series
of Log4J releases and the new 1.3.x series of releases.
The following paragraphs document changes since the previous release
(version 1.0.3). The documentation (userguide and javadoc)
has also been improved.
New Features
------------
[ALL FILES] This version of Commons Logging is released under the
Apache License (Version 2.0). All source files have been
modified to reflect this.
[maven.xml] Added beginnings of a Maven-based build, primarily for the
purpose of creating documentation consistent with Mavenized
commons projects. The official build system for the software
is still the Ant "build.xml" file.
[AvalonLogger] Added AvalonLogger, which wraps the logger used by the
Avalon framework. As with other implementations, this
is compiled only if the appropriate dependencies are
satisfied.
[Jdk13LumberjackLogger]
Added Jdk13LumberjackLogger, which wraps the implementation
of the JSR-47 logging APIs (for JDKs before 1.4) provided
by the SourceForge "lumberjack" project.
<http://sourceforge.net/projects/lumberjack/>
[LogFactoryImpl] If an InvocationTargetException is returned during the
creation of a new Log instance, unwrap the underlying
cause and pass it in to the LogConfigurationException
constructor. This will make the actual cause of the
problem easier to diagnose.
[LogFactoryImpl] If the isAssignableFrom() test fails because there is more
than one instance of org.apache.commons.logging.Log visible
in the class loader hierarchy, make the exception message
that is reported explicitly state this, rather than the
potentially misleading claim that an implementation class
does not implement Log.
[Log4JLogger] Changes to allow this logger to support both the existing 1.2.x
series of releases and also the upcoming 1.3.x series of Log4J
releases.
[SimpleLog] Added support for setting date-time format.
Bug Fixes
---------
[MANIFEST.MF] Remove reference to Log4J from the manifest classpath.
[LogConfigurationException]
Include root cause in the text of the message, if present.
[LogFactory] Improve usability of error messages reporting
configuration problems.
[JDK14Logger] Implement Serializable, remove "final" declaration for
easy subclassing.
[Log4JLogger] Implement Serializable, remove "final" declaration for
easy subclassing.
[NoOpLogger] Implement Serializable, remove "final" declaration for
easy subclassing.
[SimpleLog] Make SimpleLog more friendly to the security manager
in an applet environment, by swallowing any security
exceptions when looking up system properties that are
not accessible.
Deprecations
------------
(These are carried forward from Version 1.0.3)
[LogSource] Previously deprecated, replaced by LogFactory.
[Log4jFactory] A proxy instance of this class was transparently created
when Log4J logging was selected, yet it serves no useful
purpose. The class is now deprecated, and the proxy
instance is no longer created.
[Log4JCategoryLog] This class has been replaced by Log4JLogger, which
corresponds to the availability of the new Logger class
in Log4J 1.2 and later.
-----------------------------------------------------------------------------
Apache Commons Logging 1.0.3 Release Notes
------------------------------------------
This document contains the release notes for this version of the Commons
Logging package. It is primarily a maintenance and code cleanup release,
with minimal new features.
The following paragraphs document changes since the previous release
(version 1.0.2).
New Features
------------
[build.xml] Refined build process to correctly avoid compiling classes
when dependencies are not available, and to avoid name
clashes over Ant properties used in different ways.
[unit tests] Added new suites of tests for the Log4J and JDK 1.4
logging implementations, including tests with multiple
class loaders that closely simulate the scenario of using
commons-logging in a servlet container.
[documentation] Overall cleanup and correction of the JavaDoc documentation
to correctly reflect the current behavior. In particular,
the default logging implementation (selected if nothing
else is configured) is now SimpleLog, not NoOpLog.
[LogFactory] Add a static release(ClassLoader) method that allows,
for example, a webapp to clean up all c-l references
prior to being shut down.
Bug Fixes
---------
[build.xml] Correct the META-INF/MANIFEST.MF that was embedded in the
generated JAR files to properly contain the version number.
[LogFactory] Fix security violations on several ClassLoader method
invocations.
[SimpleLog] Dump stack trace through logger, instead of directly to
System.out, to preserve output sequence.
[SimpleLog] Avoid a security exception if system properties cannot be
read (such as in an applet).
[Bugzilla 10825] NullPointerException when Logger.getClassLoader()
returns null.
[Bugzilla 13118] Correct detection of JDK 1.4 that was mis-identifying on a
scenario where a JDK 1.3 implementation included an
implementation of JSR-47 logging.
[Bugzilla 13157] Incorrect selection of Log4J in a servlet container.
[Bugzilla 13201] Log4JLogger should not attempt to auto-configure
appenders; this is out of scope for commons-logging.
[Bugzilla 17561] Attempts to override Log4J configuration.
[Bugzilla 17894] Unable to configure commons-logging SimpleLog for a webapp.
[Bugzilla 18184] Jdk14Logger should not waste the effort to create a
Throwable (to extract calling class and method) if the
message is not going to be logged anyway.
Deprecations
------------
[LogSource] Previously deprecated, replaced by LogFactory.
[Log4jFactory] A proxy instance of this class was transparently created
when Log4J logging was selected, yet it serves no useful
purpose. The class is now deprecated, and the proxy
instance is no longer created.
[Log4JCategoryLog] This class has been replaced by Log4JLogger, which
corresponds to the availability of the new Logger class
in Log4J 1.2 and later.
-----------------------------------------------------------------------------
Apache Commons Logging Package 1.0 Release Notes
------------------------------------------------
This document contains the release notes for this version of the Commons
Logging package. This is the first release of commons-logging.
New Features
------------
* commons-logging implements an abstraction between logging and the logging
implementation being used. You can currently use Avalon's logkit, Log4J,
JDK 1.4's logging, or nothing at all. It is up to you.
-----------------------------------------------------------------------------