Skip to content

Commit 4d5dc2c

Browse files
dependabot[bot]adangel
dependabot[bot]
and
adangel
authored
Bump slf4j from 1.7.36 to 2.0.17 (#366)
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.2.13 to 1.5.32. <details> <summary>Release notes</summary> <p><em>Sourced from <a href="https://github.com/qos-ch/logback/releases">ch.qos.logback:logback-classic's releases</a>.</em></p> <blockquote> <h2>Logback 1.5.32</h2> <p><strong>2026-02-16 Release of logback version 1.5.32</strong></p> <p>• In <code>DefaultProcessor, </code>fixed incorrect check for dependencies contained within a parent model. Previous only the direct children were scanned. This fixes <a href="https://redirect.github.com/qos-ch/logback-access/issues/34">logback-access/issues/34</a>.</p> <p>• A bit-wise identical binary of this version can be reproduced by building from source code at commit e807335a67535b4eacce94e942c0bcb649665d93 associated with the tag v_1.5.32. Release built using Java &quot;21&quot; 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p> <h2>Logback 1.5.31</h2> <p><strong>2026-02-14 Release of logback version 1.5.31</strong></p> <p>• Fixed missing META-INF/services directory in logback-classic.jar. This issue rendered logback-classic version 1.5.30 unusable with SLF4J.</p> <p>• A bit-wise identical binary of this version can be reproduced by building from source code at commit 168e42f9f9a18a3ffdf31eb2bfe80a71e33ecd8b associated with the tag v_1.5.31. Release built using Java &quot;21&quot; 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p> <h2>Logback 1.5.30</h2> <p><strong>2026-02-14 Release of logback version 1.5.30</strong></p> <p>• <strong>In this version, logback-classic.jar was missing the META-INF/services directory, making it unusable with SLF4J. Version 1.5.31 (released later on the same day) fixes this issue.</strong></p> <p>• Fix scanning issue when an included file becomes available at a later time. This problem was reported in <a href="https://redirect.github.com/qos-ch/logback/issues/1021">issues/1021</a> by Sergey Nazarov.</p> <p>• Standardized code for version checking across modules.</p> <p>• A bit-wise identical binary of this version can be reproduced by building from source code at commit 44164f10ca3fb44ce0e68519f13564b87e3aca61 associated with the tag v_1.5.30. Release built using Java &quot;21&quot; 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p> <h2>Logback 1.5.29</h2> <p><strong>2026-02-09 Release of logback version 1.5.29</strong></p> <p>• In response to <a href="https://redirect.github.com/qos-ch/logback/issues/1017">issues/1017</a>, appender names and appender references are once again subject to variable substitution, reverting the change introduced in version 1.5.28.</p> <h2>Logback 1.5.28</h2> <p><strong>2026-02-06 Release of logback version 1.5.28</strong></p> <p>• Appender names or appender references are no longer subject to variable substitution.</p> <p>• Fixed issue with configurations with conditionals encompassing appenders. This was reported in <a href="https://redirect.github.com/qos-ch/logback/issues/1016">issues/1016</a> reported by Sergey Sazonov.</p> <p>• The <!-- raw HTML omitted --> element now admits a 'scan' attribute which can be used to override the 'scan' attribute in the <!-- raw HTML omitted --> element.</p> <p>• Fixed NullPointerException thrown by VersionUtil.checkForVersionEquality method occurring with GraalVM Native Images. This issue was reported in <a href="https://redirect.github.com/qos-ch/logback/issues/1014">issues/1014</a>.</p> <p>• A bit-wise identical binary of this version can be reproduced by building from source code at commit e7a1855ab562bb102333f754603ff89359bf3cfc associated with the tag v_1.5.28. Release built using Java &quot;21&quot; 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.</p> <h2>Logback 1.5.27</h2> <p><strong>2026-01-30 Release of logback version 1.5.27</strong></p> <p>• Updated license to Eclipse Public License version 2.0 from version 1.0, retaining the GPL 2.1 dual-license.</p> <p>• Fixed missing MDC data transmitted by <code>SocketAppender</code> reported in <a href="https://redirect.github.com/qos-ch/logback/issues/1010">issues/1010</a> by Lars Vogel.</p> <!-- raw HTML omitted --> </blockquote> <p>... (truncated)</p> </details> <details> <summary>Commits</summary> <ul> <li><a href="https://github.com/qos-ch/logback/commit/e807335a67535b4eacce94e942c0bcb649665d93"><code>e807335</code></a> prepare release 1.5.32</li> <li><a href="https://github.com/qos-ch/logback/commit/dc35d552bbd87cea8b98bea44ff0a113631075e7"><code>dc35d55</code></a> fix logback-access/issues/34 by checking if dependency is a sub-model of the ...</li> <li><a href="https://github.com/qos-ch/logback/commit/8e32278700d5b0cfca70c246f6db0d639bb1f21b"><code>8e32278</code></a> added simple test for appender definitiob via file inclusion</li> <li><a href="https://github.com/qos-ch/logback/commit/834dbedefdb3cf43f77618ddc3d1d89e5c98b488"><code>834dbed</code></a> start work on 1.5.32-SNAPSHOT</li> <li><a href="https://github.com/qos-ch/logback/commit/168e42f9f9a18a3ffdf31eb2bfe80a71e33ecd8b"><code>168e42f</code></a> add test to check that Logback SLF4J provider can be activated</li> <li><a href="https://github.com/qos-ch/logback/commit/ed45362291e060a93b2b28825ad3706ab85066ba"><code>ed45362</code></a> prepare release 1.5.31</li> <li><a href="https://github.com/qos-ch/logback/commit/609dae79d06b38518b48f826a22b1e7e233903c3"><code>609dae7</code></a> fix missing META-INF directory</li> <li><a href="https://github.com/qos-ch/logback/commit/77397397cd0751b4d7eb5b7ee836137072505f16"><code>7739739</code></a> start work on 1.5.31-SNAPSHOT</li> <li><a href="https://github.com/qos-ch/logback/commit/44164f10ca3fb44ce0e68519f13564b87e3aca61"><code>44164f1</code></a> prepare release 1.5.30</li> <li><a href="https://github.com/qos-ch/logback/commit/9874f06e247258e0122a099ae65964d41f2be10b"><code>9874f06</code></a> test for top-file as a resource, introduced new module logback-classic-misc</li> <li>Additional commits viewable in <a href="https://github.com/qos-ch/logback/compare/v_1.2.13...v_1.5.32">compare view</a></li> </ul> </details> <br /> [![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ch.qos.logback:logback-classic&package-manager=maven&previous-version=1.2.13&new-version=1.5.32)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores) Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`. [//]: # (dependabot-automerge-start) [//]: # (dependabot-automerge-end) --- <details> <summary>Dependabot commands and options</summary> <br /> You can trigger Dependabot actions by commenting on this PR: - `@dependabot rebase` will rebase this PR - `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it - `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency - `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) - `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself) </details> --------- Signed-off-by: dependabot[bot] <support@github.com> Co-authored-by: Andreas Dangel <andreas.dangel@pmd-code.org> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
1 parent 9e13a8d commit 4d5dc2c

1 file changed

Lines changed: 3 additions & 3 deletions

File tree

  • net.sourceforge.pmd.eclipse.plugin

‎net.sourceforge.pmd.eclipse.plugin/pom.xml‎

Lines changed: 3 additions & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -39,17 +39,17 @@
3939
<dependency>
4040
<groupId>org.slf4j</groupId>
4141
<artifactId>slf4j-api</artifactId>
42-
<version>1.7.36</version>
42+
<version>2.0.17</version>
4343
</dependency>
4444
<dependency>
4545
<groupId>ch.qos.logback</groupId>
4646
<artifactId>logback-classic</artifactId>
47-
<version>1.2.13</version>
47+
<version>1.5.32</version>
4848
</dependency>
4949
<dependency>
5050
<groupId>org.slf4j</groupId>
5151
<artifactId>jul-to-slf4j</artifactId>
52-
<version>1.7.36</version>
52+
<version>2.0.17</version>
5353
</dependency>
5454
</dependencies>
5555

0 commit comments

Comments
 (0)