Skip to content

jcl-over-slf4j is considered deprecated, replace directly with commons-logging 1.3.0+ #2174

Open
Open
jcl-over-slf4j is considered deprecated, replace directly with commons-logging 1.3.0+#2174
Labels
bugSomething isn't working

Description

@hazendaz
hazendaz
opened on Oct 3, 2026

Affected version

2.0.24

Bug description

note: Not really a bug but seemed best selection.

In my builds I have strict handling against usage of 'jcl-over-slf4j'. After maven 3.10.0 dropped, enforcer plugin rule for me alerted to the resolver 2.x using jcl-over-slf4j (2.0.24 tested here). Per apache/commons-logging#177, jcl variants are entirely obsolete. Therefore, can this be replaced with commons-logging inside the maven-resolver-transport-apache module? Currently there is an exclusion in that pom against commons-logging with jcl-over-slf4j added. The current commons-logging is 1.4.0.

As this isn't a true bug, just missed opportunity, I can work around the concern for now but would be nice to see fixed in later revision.

Activity

  1. hazendaz
    added
    bugSomething isn't working
    on Oct 3, 2026

  2. pzygielo commented on Oct 4, 2026

    @pzygielo
    pzygielo
    on Oct 4, 2026
    Contributor

    Also

    • org.apache.maven.reporting:maven-reporting-impl:3.2.0 brings commons-logging:commons-logging:jar:1.4.0
    • and org.apache.maven:maven-core:3.10.0 brings (from maven-resolver-transport-apache I guess) org.slf4j:jcl-over-slf4j:2.0.20

    This causes duplicate classes (and enforcer finding

    [ERROR]   Found in:
[ERROR]     commons-logging:commons-logging:jar:1.4.0:compile
[ERROR]     org.slf4j:jcl-over-slf4j:jar:2.0.20:provided
[ERROR]   Duplicate classes:
[ERROR]     org/apache/commons/logging/Log.class

    in build of some reporting plugin).

  3. cstamas commented on Oct 12, 2026

    @cstamas
    cstamas
    on Oct 12, 2026
    Member

    jcl is not yet deprecated qos-ch/slf4j#403
    Agreed with assessment. @pzygielo pls report this to maven reporting too

  4. slawekjaranowski commented on Oct 12, 2026

    @slawekjaranowski
    slawekjaranowski
    on Oct 12, 2026
    Member

    in reporting-imp we have:

    [INFO] --- dependency:3.11.0:tree (default-cli) @ maven-reporting-impl ---
[INFO] org.apache.maven.reporting:maven-reporting-impl:jar:4.1.0-SNAPSHOT
[INFO] \- org.apache.maven.doxia:doxia-site-renderer:jar:2.1.0:compile
[INFO]    \- org.apache.velocity.tools:velocity-tools-generic:jar:3.1:compile
[INFO]       \- commons-beanutils:commons-beanutils:jar:1.9.4:compile
[INFO]          \- commons-logging:commons-logging:jar:1.2:compile

    and

    [INFO] --- dependency:3.11.0:tree (default-cli) @ maven-reporting-impl ---
[INFO] org.apache.maven.reporting:maven-reporting-impl:jar:4.1.0-SNAPSHOT
[INFO] \- org.apache.maven:maven-core:jar:3.10.0:provided
[INFO]    \- org.apache.maven:maven-resolver-provider:jar:3.10.0:provided
[INFO]       \- org.apache.maven.resolver:maven-resolver-transport-apache:jar:2.0.24:provided
[INFO]          \- org.slf4j:jcl-over-slf4j:jar:2.0.19:provided

  5. slawekjaranowski commented on Oct 12, 2026

    @slawekjaranowski
    slawekjaranowski
    on Oct 12, 2026
    Member

    In Maven core also we have jcl-over-slf4

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Metadata

Metadata

Assignees

No one assigned

    Labels

    bugSomething isn't working

    Type

    No type

    Projects

    No projects

      Milestone

      No milestone

      Relationships

      None yet

      Development

      No branches or pull requests

      Issue actions