Bump ch.qos.logback:logback-classic from 1.5.26 to 1.5.27 by dependabot[bot] · Pull Request #18637 · spring-projects/spring-security
Bumps ch.qos.logback:logback-classic from 1.5.26 to 1.5.27.
Release notes
Sourced from ch.qos.logback:logback-classic's releases.
Logback 1.5.27
2026-01-30 Release of logback version 1.5.27
• Updated license to Eclipse Public License version 2.0 from version 1.0, retaining the GPL 2.1 dual-license.
• Fixed missing MDC data transmitted by
SocketAppenderreported in issues/1010 by Lars Vogel.• Removed all
Receiverclasses and components which were already disabled for several years.• Refactored file scanning code for improved clarity.
• In
SizeAndTimeBasedRollingPolicymodifiedtotalSizeCapandmaxFileSizecomparison to taking into account file compression. This fixes issues/1007.• A bit-wise identical binary of this version can be reproduced by building from source code at commit 3618eb01aad6672f9cd250dccf7546a69cbe982f associated with the tag v_1.5.27. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.
Commits
3618eb0increase timeout delay to 2000 millisdb150c3prepare release 1.5.270370b13fix missing MDC transmission in SocketAppender. Fixes issues/10108100acdremove RemoteAppender*2b67210remove Receiver related classesd84b586remove ReceiverModelHandler - project still builds indicating no active usage44049edremove support for receivers in SerializedModelConfigurator and JoranConfigur...56085d8fix teste7764f4refactor file change scanning for claritye56a12fbump assertj version- Additional commits viewable in compare view
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)