Bump ch.qos.logback:logback-classic from 1.5.25 to 1.5.26 by dependabot[bot] · Pull Request #18591 · spring-projects/spring-security
Bumps ch.qos.logback:logback-classic from 1.5.25 to 1.5.26.
Release notes
Sourced from ch.qos.logback:logback-classic's releases.
Logback 1.5.26
2026-01-25 Release of logback version 1.5.26
• InsertFromJNDIModelHandler was accessing javax.naming package forcing the inclusion of the optional java.naming module. This problem was raised in issues/1003 by Marius Hanl who also provided the relevant PR.
• In applications using shadow/fat/shade jars, module or package information could be lost. Thus, in the absence of version information, logback-classic would warn about version mismatches. Logback components now ship with properties files containing version information that survive shadow/fat/shade jars. This issue was reporteed in issues/1002 by Christoph Gritschenberger.
• A bit-wise identical binary of this version can be reproduced by building from source code at commit 33deb54506bbfaf1ff151f26f3a5f86936011619 associated with the tag v_1.5.26. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.
Commits
33deb54prepare release 1.5.26d38a3e2refactoring based on usage in logback-access4368333move VersionUtil.getCoreVersionBySelfDeclaredProperties to CoreVersionUtil8bd5660modify VersionCheckTest to use logback-core 1.5.257a8f0b6version information is self declared by modules.00d272fDo not use javax.naming namespace in the catch block, so that Logback can be ...420d67cmention country only, add missing 2016-03-29033aba4fix javadoc errors6d52744start work on 1.5.26-SNAPSHOT- See full diff in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)