Skip to content

Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38#1536

Merged
fjtirado merged 1 commit into
4.xfrom
dependabot/maven/4.x/ch.qos.logback-logback-classic-1.5.38
Jul 13, 2026
Merged

Bump ch.qos.logback:logback-classic from 1.5.37 to 1.5.38#1536
fjtirado merged 1 commit into
4.xfrom
dependabot/maven/4.x/ch.qos.logback-logback-classic-1.5.38

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 13, 2026

Copy link
Copy Markdown
Contributor

Bumps ch.qos.logback:logback-classic from 1.5.37 to 1.5.38.

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.5.38

2026-07-09 Release of logback version 1.5.38

• In HardenedObjectInputStream, fixed a typo preventing Throwable objects from being white-filtered. This issue was reported in [PR #1045](qos-ch/logback#1045) by t0rchwo0d.

• A bitwise identical binary of this version can be reproduced by building from source code at commit d04984a41fce42977466f45a2f076f0ee5cc4207 associated with the tag v_1.5.38. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • d04984a prepare release 1.5.38
  • 4fffda6 updateversion of maven-gpg-plugin
  • 7ee48a1 Fixed a typo where java,lang.Throwable was written with a comma instead of a ...
  • 84580a2 remove license profile
  • f817c8d start work on 1.5.28-SNAPSHOT
  • See full diff in compare view

@dependabot dependabot Bot requested a review from ricardozanini as a code owner July 13, 2026 13:05
@dependabot dependabot Bot requested a review from fjtirado as a code owner July 13, 2026 13:05
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Jul 13, 2026
Bumps [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from 1.5.37 to 1.5.38.
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.37...v_1.5.38)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.5.38
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot force-pushed the dependabot/maven/4.x/ch.qos.logback-logback-classic-1.5.38 branch from cb876e5 to b8e8658 Compare July 13, 2026 15:28
@fjtirado fjtirado merged commit 0e13794 into 4.x Jul 13, 2026
2 checks passed
@dependabot dependabot Bot deleted the dependabot/maven/4.x/ch.qos.logback-logback-classic-1.5.38 branch July 13, 2026 16:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants