Skip to content

Bump the logback group across 1 directory with 2 updates#595

Merged
dannil merged 1 commit into
devfrom
dependabot/maven/logback-dcf9d07bba
Jul 11, 2026
Merged

Bump the logback group across 1 directory with 2 updates#595
dannil merged 1 commit into
devfrom
dependabot/maven/logback-dcf9d07bba

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 11, 2026

Copy link
Copy Markdown
Contributor

Bumps the logback group with 2 updates in the / directory: ch.qos.logback:logback-core and ch.qos.logback:logback-classic.

Updates ch.qos.logback:logback-core from 1.5.37 to 1.5.38

Release notes

Sourced from ch.qos.logback:logback-core's releases.

Logback 1.5.38

2026-07-09 Release of logback version 1.5.38

• In HardenedObjectInputStream, fixed a typo preventing Throwable objects from being white-filtered. This issue was reported in [PR #1045](qos-ch/logback#1045) by t0rchwo0d.

• A bitwise identical binary of this version can be reproduced by building from source code at commit d04984a41fce42977466f45a2f076f0ee5cc4207 associated with the tag v_1.5.38. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • d04984a prepare release 1.5.38
  • 4fffda6 updateversion of maven-gpg-plugin
  • 7ee48a1 Fixed a typo where java,lang.Throwable was written with a comma instead of a ...
  • 84580a2 remove license profile
  • f817c8d start work on 1.5.28-SNAPSHOT
  • See full diff in compare view

Updates ch.qos.logback:logback-classic from 1.5.37 to 1.5.38

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.38

2026-07-09 Release of logback version 1.5.38

• In HardenedObjectInputStream, fixed a typo preventing Throwable objects from being white-filtered. This issue was reported in [PR #1045](qos-ch/logback#1045) by t0rchwo0d.

• A bitwise identical binary of this version can be reproduced by building from source code at commit d04984a41fce42977466f45a2f076f0ee5cc4207 associated with the tag v_1.5.38. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • d04984a prepare release 1.5.38
  • 4fffda6 updateversion of maven-gpg-plugin
  • 7ee48a1 Fixed a typo where java,lang.Throwable was written with a comma instead of a ...
  • 84580a2 remove license profile
  • f817c8d start work on 1.5.28-SNAPSHOT
  • See full diff in compare view

@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Jul 11, 2026
Bumps the logback group with 2 updates in the / directory: [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) and [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback).


Updates `ch.qos.logback:logback-core` from 1.5.37 to 1.5.38
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.37...v_1.5.38)

Updates `ch.qos.logback:logback-classic` from 1.5.37 to 1.5.38
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.37...v_1.5.38)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.38
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: logback
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.5.38
  dependency-type: direct:development
  update-type: version-update:semver-patch
  dependency-group: logback
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot changed the title Bump the logback group with 2 updates Bump the logback group across 1 directory with 2 updates Jul 11, 2026
@dependabot
dependabot Bot force-pushed the dependabot/maven/logback-dcf9d07bba branch from 81309fe to 3c9e08c Compare July 11, 2026 18:30
@dannil
dannil merged commit e947d9c into dev Jul 11, 2026
2 checks passed
@dependabot
dependabot Bot deleted the dependabot/maven/logback-dcf9d07bba branch July 11, 2026 18:31
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant