'override sbt internal dependency

sbt contains internal dependency - util logging:

https://mvnrepository.com/artifact/org.scala-sbt/util-logging_2.10/1.2.0

and util logging dependency contain org.apache.logging.log4j » log4j-api:

https://mvnrepository.com/artifact/org.apache.logging.log4j/log4j-api/2.8.1

the problem is that project download dependencies behind the proxy, and proxy does not contain 2.8.1 version of log4j-api(because of vulnerabilities), but proxy contains 2.17.1 version of log4j-api. So I want to use 2.17.1 version instead of 2.8.1. Is there an opportunity to do it. I mean I've got and error during dowloading dependencies:

module not found: org.apache.logging.log4j#log4j-core;2.8.1

Even I don't want to download org.apache.logging.log4j#log4j-core;2.8.1 because it leads to error during build

scala 2.10.4

sbt 1.2.0



Sources

This article follows the attribution requirements of Stack Overflow and is licensed under CC BY-SA 3.0.

Source: Stack Overflow

Solution Source