Exclude log4j-core from compile dependencies

No need for a logger implementation for compilation. Issue #19300
gradle · Dec 13, 2021 · a7ef431 · a7ef431
1 parent 39a1c84
commit a7ef431
Showing 1 changed file with 3 additions and 1 deletion.
diff --git a/subprojects/scala/build.gradle.kts b/subprojects/scala/build.gradle.kts
@@ -27,7 +27,9 @@ dependencies {
     implementation(libs.guava)
     implementation(libs.inject)
 
-    compileOnly("org.scala-sbt:zinc_2.12:1.3.5")
+    compileOnly("org.scala-sbt:zinc_2.12:1.3.5") {
+        exclude(module="log4j-core") // Because not needed and vulnerable
+    }
 
     testImplementation(project(":base-services-groovy"))
     testImplementation(project(":files"))