Skip to content

[Snyk] Upgrade ch.qos.logback:logback-classic from 1.5.25 to 1.5.29#1

Open
ayusuf-mq wants to merge 1 commit into
mainfrom
snyk-upgrade-0ffa7d74fc5aa944699b4182c9453443
Open

[Snyk] Upgrade ch.qos.logback:logback-classic from 1.5.25 to 1.5.29#1
ayusuf-mq wants to merge 1 commit into
mainfrom
snyk-upgrade-0ffa7d74fc5aa944699b4182c9453443

Conversation

@ayusuf-mq
Copy link
Copy Markdown

snyk-top-banner

Snyk has created this PR to upgrade ch.qos.logback:logback-classic from 1.5.25 to 1.5.29.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.


  • The recommended version is 4 versions ahead of your current version.

  • The recommended version was released 22 days ago.

Breaking Change Risk

Merge Risk: Low

Notice: This assessment is enhanced by AI.


Important

  • Check the changes in this PR to ensure they won't cause issues with your project.
  • This PR was automatically created by Snyk using the credentials of a real user.

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

Snyk has created this PR to upgrade ch.qos.logback:logback-classic from 1.5.25 to 1.5.29.

See this package in maven:
ch.qos.logback:logback-classic

See this project in Snyk:
https://app.snyk.io/org/mq_github_cloud/project/1a8ba57e-de7e-441a-ae13-4f07d567a1a5?utm_source=github&utm_medium=referral&page=upgrade-pr
@ayusuf-mq
Copy link
Copy Markdown
Author

Merge Risk: Low

This is a patch version upgrade that includes bug fixes and security patches. A potentially breaking change related to variable substitution in appender names was introduced in version 1.5.28 but was reverted in the target version 1.5.29.

Key Changes:

  • Version 1.5.29: Reverts a change from 1.5.28, ensuring that appender names and references are once again subject to variable substitution.
  • Version 1.5.27: Removes Receiver classes that were disabled for several years and updates the license to EPL 2.0.
  • Version 1.5.25: Includes a fix for a security vulnerability (CVE-2026-1225).

No developer action is required for this upgrade.

Source: Logback News

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants