4.0.0org.apacheapache30org.apache.logginglogging-parent10.4.0pomApache Logging ParentParent project internally used in Maven-based projects of the Apache Logging Serviceshttps://logging.apache.org/logging-parent1999Apache-2.0https://www.apache.org/licenses/LICENSE-2.0.txtrepoggregoryGary Gregoryggregory@apache.orghttps://www.garygregory.comThe Apache Software Foundationhttps://www.apache.org/PMC MemberAmerica/New_YorkgrobmeierChristian Grobmeiergrobmeier@apache.orgPMC MemberEurope/BerlinmattsickerMatt Sickermattsicker@apache.orgApplePMC MemberAmerica/ChicagopkarwaszPiotr P. Karwaszpkarwasz@apache.orgPMC MemberEurope/WarsawvyVolkan Yazıcıvy@apache.orgPMC ChairEurope/Amsterdamlog4j-userlog4j-user-subscribe@logging.apache.orglog4j-user-unsubscribe@logging.apache.orglog4j-user@logging.apache.orghttps://lists.apache.org/list.html?log4j-user@logging.apache.orgdevdev-subscribe@logging.apache.orgdev-unsubscribe@logging.apache.orgdev@logging.apache.orghttps://lists.apache.org/list.html?dev@logging.apache.orgscm:git:git@github.com:apache/logging-parent.gitscm:git:git@github.com:apache/logging-parent.githttps://github.com/apache/logging-parentGitHub Issueshttps://github.com/apache/logging-parent/issuesGitHub Actionshttps://github.com/apache/logging-parent/actionshttps://logging.apache.org/logging-parent/latest/#distribution81.1.04.8.1${bnd-maven-plugin.version}6.4.01.12.0$[bnd-module-name];access=01.5.08.1.02.2.42.0.01.1.20.5.06.4.12.23.0<xsl:stylesheet version="1.0"
xmlns:xsl="http://www.w3.org/1999/XSL/Transform"
xmlns="http://cyclonedx.org/schema/bom/1.5"
xmlns:xalan="http://xml.apache.org/xalan"
xmlns:cdx14="http://cyclonedx.org/schema/bom/1.4"
xmlns:cdx15="http://cyclonedx.org/schema/bom/1.5"
exclude-result-prefixes="xalan cdx14 cdx15">
<xsl:param name="sbom.serialNumber"/>
<xsl:param name="vdr.url"/>
<xsl:output method="xml"
version="1.0"
encoding="UTF-8"
indent="yes"
xalan:indent-amount="2"
xalan:line-separator=" "/>
<!-- Fixes the license formatting -->
<xsl:template match="/">
<xsl:text> </xsl:text>
<xsl:apply-templates />
</xsl:template>
<!-- Standard copy template -->
<xsl:template match="@*|node()">
<xsl:copy>
<xsl:apply-templates select="@*" />
<xsl:apply-templates />
</xsl:copy>
</xsl:template>
<!-- Bump the SBOM schema version from `1.4` to `1.5` -->
<xsl:template match="cdx14:*">
<xsl:element name="{local-name()}" namespace="http://cyclonedx.org/schema/bom/1.5">
<xsl:apply-templates select="@*" />
<xsl:apply-templates />
</xsl:element>
</xsl:template>
<!-- Add the SBOM `serialNumber` -->
<xsl:template match="cdx14:bom">
<bom>
<xsl:attribute name="version">
<xsl:value-of select="1"/>
</xsl:attribute>
<xsl:attribute name="serialNumber">
<xsl:text>urn:uuid:</xsl:text>
<xsl:value-of select="$sbom.serialNumber"/>
</xsl:attribute>
<xsl:apply-templates />
</bom>
</xsl:template>
<!-- Add the link to the VDR -->
<xsl:template match="cdx14:externalReferences[starts-with(preceding-sibling::cdx14:group, 'org.apache.logging')]">
<externalReferences>
<xsl:apply-templates/>
<reference>
<xsl:attribute name="type">vulnerability-assertion</xsl:attribute>
<url>
<xsl:value-of select="$vdr.url"/>
</url>
</reference>
</externalReferences>
</xsl:template>
</xsl:stylesheet>[17,18)$[project.groupId].$[subst;$[subst;$[project.artifactId];log4j-];[^A-Za-z0-9];.]2.38.01.4https://logging.apache.org/cyclonedx/vdr.xml83.4.03.5.06.7.0.202309050840-r$[Bundle-SymbolicName]10.4.04.8.1.02.40.08false2023-11-13T20:50:43Z2.7.101.0.1biz.aQute.bndbiz.aQute.bnd.annotation${bnd.annotation.version}com.github.spotbugsspotbugs-annotations${spotbugs-annotations.version}org.osgiosgi.annotation${osgi.annotation.version}org.osgiorg.osgi.annotation.bundle${osgi.annotation.bundle.version}org.osgiorg.osgi.annotation.versioning${osgi.annotation.versioning.version}org.asciidoctorasciidoctor-maven-plugin${asciidoctor-maven-plugin.version}maven-artifact-plugin${maven-artifact-plugin.version}org.codehaus.mojoflatten-maven-plugin${flatten-maven-plugin.version}org.simplify4u.pluginssign-maven-plugin${sign-maven-plugin.version}com.github.spotbugsspotbugs-maven-plugin${spotbugs-maven-plugin.version}org.codehaus.mojoxml-maven-plugin${xml-maven-plugin.version}com.diffplug.spotlessspotless-maven-plugin${spotless-maven-plugin.version}com.github.genthalerbeanshell-maven-plugin${beanshell-maven-plugin.version}org.apache.logging.log4jlog4j-changelog-maven-plugin${log4j-changelog-maven-plugin.version}org.freemarkerfreemarker2.3.32biz.aQute.bndbnd-baseline-maven-plugin${bnd-baseline-maven-plugin.version}biz.aQute.bndbnd-maven-plugin${bnd-maven-plugin.version}org.codehaus.mojobuild-helper-maven-plugin${build-helper-maven-plugin.version}org.cyclonedxcyclonedx-maven-plugin${cyclonedx-maven-plugin.version}org.codehaus.mojoflatten-maven-pluginflatten-revisionprocess-resourcesflattentrueresolveCiFriendliesOnlyclean-flattened-pomcleancleanflatten-bomnoneflattenbomremoveremoveremoveremoveinterpolatekeepmaven-compiler-plugin${maven.compiler.source}${maven.compiler.release}${maven.compiler.target}${project.build.sourceEncoding}true-Xlint:all-XDcompilePolicy=simple-Xplugin:ErrorPronecom.google.errorproneerror_prone_core${error-prone.version}org.cyclonedxcyclonedx-maven-plugingenerate-sbompackagemakeAggregateBomxmlcom.github.genthalerbeanshell-maven-pluginprocess-sbompackageruncommons-codeccommons-codec1.16.0xalanserializer2.7.3xalanxalan2.7.3maven-enforcer-pluginenforce-upper-bound-depsenforcecom.github.spotbugsspotbugs-maven-plugindefault-spotbugsverifycheckcom.h3xstream.findsecbugsfindsecbugs-plugin${findsecbugs-plugin.version}org.apache.ratapache-rat-pluginverifychecktrue.java-version.mvn/jvm.config**/*.txtsrc/changelog/**/*.xml.github/ISSUE_TEMPLATE/*.md.github/pull_request_template.mdcom.diffplug.spotlessspotless-maven-plugindefault-spotlessverifycheck/*
* Licensed to the Apache Software Foundation (ASF) under one or more
* contributor license agreements. See the NOTICE file distributed with
* this work for additional information regarding copyright ownership.
* The ASF licenses this file to you under the Apache License, Version 2.0
* (the "License"); you may not use this file except in compliance with
* the License. You may obtain a copy of the License at
*
* http://www.apache.org/licenses/LICENSE-2.0
*
* Unless required by applicable law or agreed to in writing, software
* distributed under the License is distributed on an "AS IS" BASIS,
* WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
* See the License for the specific language governing permissions and
* limitations under the License.
*/${palantir-java-format.version}<?xml version="1.0" encoding="UTF-8"?>
<!--
~ Licensed to the Apache Software Foundation (ASF) under one or more
~ contributor license agreements. See the NOTICE file distributed with
~ this work for additional information regarding copyright ownership.
~ The ASF licenses this file to you under the Apache License, Version 2.0
~ (the "License"); you may not use this file except in compliance with
~ the License. You may obtain a copy of the License at
~
~ http://www.apache.org/licenses/LICENSE-2.0
~
~ Unless required by applicable law or agreed to in writing, software
~ distributed under the License is distributed on an "AS IS" BASIS,
~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
~ See the License for the specific language governing permissions and
~ limitations under the License.
--><projectfalsetruesrc/**/*.xmlsrc/changelog/**/*.xml<?xml version="1.0" encoding="UTF-8"?>
<!--
~ Licensed to the Apache Software Foundation (ASF) under one or more
~ contributor license agreements. See the NOTICE file distributed with
~ this work for additional information regarding copyright ownership.
~ The ASF licenses this file to you under the Apache License, Version 2.0
~ (the "License"); you may not use this file except in compliance with
~ the License. You may obtain a copy of the License at
~
~ http://www.apache.org/licenses/LICENSE-2.0
~
~ Unless required by applicable law or agreed to in writing, software
~ distributed under the License is distributed on an "AS IS" BASIS,
~ WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
~ See the License for the specific language governing permissions and
~ limitations under the License.
--><(!DOCTYPE|\w)src/**/*.properties#
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements. See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to you under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License. You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#(##|[^#]).asf.yaml.github/**/*.yaml.github/**/*.ymlsrc/**/*.yamlsrc/**/*.yml#
# Licensed to the Apache Software Foundation (ASF) under one or more
# contributor license agreements. See the NOTICE file distributed with
# this work for additional information regarding copyright ownership.
# The ASF licenses this file to you under the Apache License, Version 2.0
# (the "License"); you may not use this file except in compliance with
# the License. You may obtain a copy of the License at
#
# http://www.apache.org/licenses/LICENSE-2.0
#
# Unless required by applicable law or agreed to in writing, software
# distributed under the License is distributed on an "AS IS" BASIS,
# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
# See the License for the specific language governing permissions and
# limitations under the License.
#(##|[^#])UNIXorg.codehaus.mojobuild-helper-maven-pluginparse-versionvalidateparse-versionbiz.aQute.bndbnd-maven-plugintruedefault-jarjar# `Bundle-DocURL` uses `project.url`.
# This is set to `${project.parent.url}${project.artifactId}` through Maven's inheritance assembly[1].
# This eventually produces incorrect values.
# Hence, we remove them from the produced descriptor.
#
# `Bundle-SCM` uses `project.scm.url` and suffers from the same inheritance problem `Bundle-DocURL` has.
#
# [1] https://maven.apache.org/ref/3.9.4/maven-model-builder/#inheritance-assembly
# Inheritance assembly can be disabled for certain properties, e.g., `project.url`.
# Though this would necessitate changes in the root `pom.xml`s of parented projects.
#
# `Bundle-Developers` is removed, since it is nothing but noise and occupies quite some real estate.
-removeheaders: Bundle-DocURL,Bundle-SCM,Bundle-Developers
# Create OSGi and JPMS module names based on the `groupId` and `artifactId`.
# This almost agrees with `maven-bundle-plugin`, but replaces non-alphanumeric characters
# with full stops `.`.
Bundle-SymbolicName: $[bnd-bundle-symbolicname]
-jpms-module-info: $[bnd-jpms-module-info]
# Prevents an execution error in multi-release jars:
-fixupmessages.classes_in_wrong_dir: "Classes found in the wrong directory";restrict:=error;is:=warning
# Convert API leakage warnings to errors
-fixupmessages.priv_refs: "private references";restrict:=warning;is:=error
# 1. OSGI modules do not make sense in JPMS
# 2. BND has a problem detecting the name of multi-release JPMS modules
-jpms-module-info-options: \
$[bnd-extra-module-options],\
org.osgi.core;static=true;transitive=false,\
org.osgi.framework;static=true;transitive=false,\
org.apache.logging.log4j;substitute="log4j-api",\
org.apache.logging.log4j.core;substitute="log4j-core"
# Import all packages by default:
Import-Package: \
$[bnd-extra-package-options],\
*
# Allow each project to override the `Multi-Release` header:
Multi-Release: $[bnd-multi-release]
# Add manifests and modules for each multi-release version:
-jpms-multi-release: $[bnd-multi-release]
# Adds certain `Implementation-*` and `Specification-*` entries to the generated `MANIFEST.MF`.
# Using these properties is known to be a bad practice: https://github.com/apache/logging-log4j2/issues/1923#issuecomment-1786818254
# Users should use `META-INF/maven/<groupId>/<artifactId>/pom.properties` instead.
# Yet we support it due to backward compatibility reasons.
# The issue was reported to `bnd-maven-plugin` too: https://github.com/bndtools/bnd/issues/5855
# We set these values to their Maven Archiver defaults: https://maven.apache.org/shared/maven-archiver/#class_manifest
Implementation-Title: ${project.name}
Implementation-Vendor: ${project.organization.name}
Implementation-Version: ${project.version}
Specification-Title: ${project.name}
Specification-Vendor: ${project.organization.name}
Specification-Version: ${parsedVersion.majorVersion}.${parsedVersion.minorVersion}
# Extra configuration provided by the consumer:
${bnd-extra-config}biz.aQute.bndbnd-baseline-maven-plugincheck-api-compatbaselinefalsetruechangelog-validatesrc/changelogorg.codehaus.mojoxml-maven-pluginvalidate-changelogvalidatevalidatesrc/changelog**/*.xmlhttp://logging.apache.org/log4j/changeloghttps://logging.apache.org/log4j/changelog-0.1.2.xsdtruechangelog-exportsrc/changelogorg.apache.logging.log4jlog4j-changelog-maven-pluginexport-changeloggenerate-sourcesexportsrc/site.index.adoc.ftl_release-notes.adoc.release-notes.adoc.ftl_release-notes/_%v.adocchangelog-releaselog4j-changelog:release@release-changelog generate-sourcesorg.apache.logging.log4jlog4j-changelog-maven-pluginrelease-changelog${project.version}distributionenforcer:enforce@enforce-distribution-arguments bsh:run@create-distributionmaven-enforcer-pluginenforce-distribution-argumentsenforceattachmentFilepathPatternYou must set an `attachmentFilepathPattern` property for the regex pattern matched against the full filepath for determining attachments to be included in the distribution!attachmentCountYou must set an `attachmentCount` property for the number of attachments expected to be found!truecom.github.genthalerbeanshell-maven-plugincreate-distributionrunorg.eclipse.jgitorg.eclipse.jgit${org.eclipse.jgit.version}deploydeployorg.simplify4u.pluginssign-maven-pluginsigntruetruetruetruetruereleasemaven-source-pluginattach-sourcesjar-no-forkmaven-enforcer-pluginenforce-no-snapshotsenforceSNAPSHOT dependencies are not allowed for releasestrueA release cannot be a SNAPSHOT versiontrueconstants-tmpl-adocsrc/site/_constants.tmpl.adocmaven-antrun-plugincopy-constants-adocgenerate-sourcesrunmaven-resources-pluginfilter-constants-adocprocess-sourcescopy-resourcessrc/site${project.build.directory}/constants-adoctrueasciidocsrc/siteorg.asciidoctorasciidoctor-maven-pluginexport-asciidoc-to-htmlsiteprocess-asciidocsrc/site${project.build.directory}/sitetruecoderayleftfonttruetruespotbugs-exclude${maven.multiModuleProjectDirectory}/spotbugs-exclude.xmlcom.github.spotbugsspotbugs-maven-plugin${maven.multiModuleProjectDirectory}/spotbugs-exclude.xml