chore(deps): update org.apache.logging.log4j:* to v2.24.1 - autoclosed

[solrbot]

This PR contains the following updates:

Package	Type	Update	Change
org.apache.logging.log4j:log4j-web (source)	dependencies	minor	2.21.0 -> 2.24.1
org.apache.logging.log4j:log4j-slf4j2-impl (source)	dependencies	minor	2.21.0 -> 2.24.1
org.apache.logging.log4j:log4j-layout-template-json (source)	dependencies	minor	2.21.0 -> 2.24.1
org.apache.logging.log4j:log4j-core (source)	dependencies	minor	2.21.0 -> 2.24.1
org.apache.logging.log4j:log4j-api (source)	dependencies	minor	2.21.0 -> 2.24.1
org.apache.logging.log4j:log4j-1.2-api (source)	dependencies	minor	2.21.0 -> 2.24.1

---

Configuration

📅 Schedule: Branch creation - "* * * * *" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.

---

• If you want to rebase/retry this PR, check this box

---

This PR has been generated by Renovate Bot

[solrbot]

⚠ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Command failed: ./gradlew updateLicenses
Note: Some input files use or override a deprecated API.
Note: Recompile with -Xlint:deprecation for details.
/home/ubuntu/.gradle/caches/modules-2/files-2.1/org.apache.logging.log4j/log4j-api/2.23.1/9c15c29c526d9c6783049c0a77722693c66706e1/log4j-api-2.23.1.jar(/org/apache/logging/log4j/Level.class): warning: Cannot find annotation method 'value()' in type 'BaselineIgnore': class file for aQute.bnd.annotation.baseline.BaselineIgnore not found
error: warnings found and -Werror specified
Note: Some input files use or override a deprecated API.
Note: Recompile with -Xlint:deprecation for details.
1 error
1 warning

FAILURE: Build failed with an exception.

* What went wrong:
Execution failed for task ':solr:test-framework:compileJava'.
> Compilation failed; see the compiler error output for details.

* Try:
> Run with --info option to get more log output.

BUILD FAILED in 29s

[cpoerschke]

Similar to #1821 i.e. blocked on JDK 17+ -- if I find a third solrbot PR like it I'll create a JIRA and then close out these in favour of that.

#1821 (comment)

[solrbot]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: undefined

Command failed: ./gradlew updateLicenses
Note: Some input files use or override a deprecated API.
Note: Recompile with -Xlint:deprecation for details.
SLF4J(W): No SLF4J providers were found.
SLF4J(W): Defaulting to no-operation (NOP) logger implementation
SLF4J(W): See https://www.slf4j.org/codes.html#noProviders for further details.
Note: Some input files use or override a deprecated API.
Note: Recompile with -Xlint:deprecation for details.
Note: Some input files use or override a deprecated API.
Note: Recompile with -Xlint:deprecation for details.
Note: Some input files use or override a deprecated API.
Note: Recompile with -Xlint:deprecation for details.
Note: Some input files use or override a deprecated API.
Note: Recompile with -Xlint:deprecation for details.
/opt/containerbase/home/.gradle/caches/modules-2/files-2.1/org.apache.logging.log4j/log4j-api/2.24.1/7ebeb12c20606373005af4232cd0ecca72613dda/log4j-api-2.24.1.jar(/org/apache/logging/log4j/Level.class): warning: Cannot find annotation method 'value()' in type 'BaselineIgnore': class file for aQute.bnd.annotation.baseline.BaselineIgnore not found
error: warnings found and -Werror specified
Note: Some input files use or override a deprecated API.
Note: Recompile with -Xlint:deprecation for details.
1 error
1 warning
Note: /tmp/renovate/repos/github/apache/solr/solr/modules/analysis-extras/src/java/org/apache/solr/schema/ICUCollationField.java uses or overrides a deprecated API.
Note: Recompile with -Xlint:deprecation for details.

FAILURE: Build failed with an exception.

* What went wrong:
Execution failed for task ':solr:test-framework:compileJava'.
> Compilation failed; see the compiler error output for details.

* Try:
> Run with --info option to get more log output.

BUILD FAILED in 51s

[risdenk]

@janhoy where did you see that log4j requires JDK 17? I don't see that based on https://logging.apache.org/log4j/2.x/release-notes.html

I found apache/logging-log4j2#1922 that affects the 2.21 version we use in Solr and we use the notEmpty so it actually produces more verbose logging.

I think we can upgrade log4j2

[janhoy]

@janhoy where did you see that log4j requires JDK 17? I don't see that based on https://logging.apache.org/log4j/2.x/release-notes.html

I found apache/logging-log4j2#1922 that affects the 2.21 version we use in Solr and we use the notEmpty so it actually produces more verbose logging.

I think we can upgrade log4j2

If you can make it work without compile failure then go for it. Last I tried I ran into issues #2047 (comment)

My issue over there was not with log4j itself but its dependency biz.aQute v7.0 which appers to require JDK17:

bad class file: /home/runner/.gradle/caches/modules-2/files-2.1/biz.aQute.bnd/biz.aQute.bnd.annotation/7.0.0/8ad279ebf0d04ea89c5ce4d934189d0d16bb6d50/biz.aQute.bnd.annotation-7.0.0.jar(/aQute/bnd/annotation/baseline/BaselineIgnore.class)
    class file has wrong version 61.0, should be 55.0

Don't know what we use those annotations for, perhaps we can get rid of them?

[risdenk]

Ah thanks @janhoy not sure how I missed that comment. I'll take a closer look

[risdenk]

New PR #2895