From 25dab516d8dcb53b22bb0c01853edd268a1c2477 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 17 Jun 2025 02:05:52 +0000 Subject: [PATCH] Bump ch.qos.logback:logback-classic from 1.1.2 to 1.5.18 Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.1.2 to 1.5.18. - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](https://github.com/qos-ch/logback/commits/v_1.5.18) --- updated-dependencies: - dependency-name: ch.qos.logback:logback-classic dependency-version: 1.5.18 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 15a0d3e..c1ee9e1 100644 --- a/build.gradle +++ b/build.gradle @@ -101,7 +101,7 @@ dependencies { // TODO DEPS Need to rework the java common logger to not use syslog4j at all since it's // abandonware and has a ton of CVEs, even in the newer versions. implementation "org.syslog4j:syslog4j:0.9.46" - implementation 'ch.qos.logback:logback-classic:1.1.2' + implementation 'ch.qos.logback:logback-classic:1.5.18' implementation("com.github.kbase:auth2_client_java:0.5.0") { exclude group: 'com.fasterxml.jackson.core' // breaks everything if we upgrade }