volume_up

A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More. 

volume_up

A critical vulnerability was discovered in React Server Components (Next.js). Our systems remain protected but we advise to update packages to newest version. Learn More. 
AI OnAI Offsmart_toy

log4net dependency

Jeroen Stemerdink
Jeroen Stemerdink
Vote:
expand_less 0 expand_more

Hi all,

Is there a specific reason why the EPiServer Framework NuGet package has a strict dependency on log4net.1.2.10?

This prevents other packages, that request a higher version, from installing in your project, which is becoming quite a problem.

 

Best,

Jeroen

#86127
May 14, 2014 11:56
Johan Björnfot
Johan Björnfot
Vote:
expand_less 0 expand_more

The reason is that the higher version of log4net is signed with a different key, see https://www.google.se/search?q=log4net+publickey&oq=log4net+publickey

#86144
May 14, 2014 16:05
valdis
valdis
Vote:
expand_less 0 expand_more

Install other packages using `-ignoredependencies` :) But yes - I would suggest to switch to some other logging framework - let's say Common.Logging and give devs option to choose desired appender.

#86352
May 19, 2014 21:25
error This thread is locked and should be used for reference only.
* You are NOT allowed to include any hyperlinks in the post because your account hasn't associated to your company. User profile should be updated.