This is an automated email from the ASF dual-hosted git repository.
fanningpj pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/incubator-pekko.git
The following commit(s) were added to refs/heads/main by this push:
new 9fad559cf6 upgrade logback due to cve (#821)
9fad559cf6 is described below
commit 9fad559cf6b4b842791f38f68c39868e11984079
Author: PJ Fanning <[email protected]>
AuthorDate: Sat Dec 2 09:50:56 2023 +0100
upgrade logback due to cve (#821)
---
.scala-steward.conf | 5 +++++
project/Dependencies.scala | 2 +-
2 files changed, 6 insertions(+), 1 deletion(-)
diff --git a/.scala-steward.conf b/.scala-steward.conf
index 849452a7d0..d88f5de675 100644
--- a/.scala-steward.conf
+++ b/.scala-steward.conf
@@ -20,4 +20,9 @@ updates.ignore = [
{ groupId = "com.lightbend.sbt", artifactId = "sbt-java-formatter" }
]
+updates.pin = [
+ # Pin logback to v1.3.x because v1.4.x needs JDK11
+ { groupId = "ch.qos.logback", version="1.3." }
+]
+
updatePullRequests = "always"
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
index 1040248b0c..b962a258dc 100644
--- a/project/Dependencies.scala
+++ b/project/Dependencies.scala
@@ -31,7 +31,7 @@ object Dependencies {
val agronaVersion = "1.19.2"
val nettyVersion = "4.1.101.Final"
val protobufJavaVersion = "3.20.3"
- val logbackVersion = "1.3.11"
+ val logbackVersion = "1.3.13"
val jacksonCoreVersion = "2.14.3"
val jacksonDatabindVersion = jacksonCoreVersion
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
