Skip to content

deps(deps): bump the maven-minor-patch group across 3 directories with 3 updates - #467

Merged
DemchaAV merged 1 commit into
developfrom
dependabot/maven/develop/maven-minor-patch-29cddd7c59
Jul 27, 2026
Merged

deps(deps): bump the maven-minor-patch group across 3 directories with 3 updates#467
DemchaAV merged 1 commit into
developfrom
dependabot/maven/develop/maven-minor-patch-29cddd7c59

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 27, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps the maven-minor-patch group with 3 updates in the / directory: ch.qos.logback:logback-classic, org.apache.maven.plugins:maven-jar-plugin and com.itextpdf:itext-core.
Bumps the maven-minor-patch group with 2 updates in the /benchmarks directory: ch.qos.logback:logback-classic and com.itextpdf:itext-core.
Bumps the maven-minor-patch group with 1 update in the /examples directory: ch.qos.logback:logback-classic.

Updates ch.qos.logback:logback-classic from 1.5.38 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • b07adf3 synronized logback-access with future 2.0.14
  • 8381cdc prepare release 1.6.0
  • 15db759 notes on removed deprecated classes, methods and variables.
  • 90ced5a revert removal of support for packaing data
  • 64c5d3f Packaging data is no longer supported. It was rarely used.
  • 5474044 fix failing tests
  • ac484c2 in version 1.6.x target JDK 11
  • 01eaa90 start work on version 1.6.0-SNAPSHOT
  • d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
  • 94ba1a0 improve message in case of version mismatch
  • Additional commits viewable in compare view

Updates org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1

Release notes

Sourced from org.apache.maven.plugins:maven-jar-plugin's releases.

3.5.1

📝 Documentation updates

  • Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk

👻 Maintenance

  • Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability (#550) @​potiuk
  • Use plugin version properties (3.x) (#535) @​Bukama

📦 Dependency updates

Commits
  • b0cd63d [maven-release-plugin] prepare release maven-jar-plugin-3.5.1
  • 5318a4f Add AGENTS.md + SECURITY.md security-model pointer for scanner discoverability
  • 8e0b9bb Bump org.apache.maven.plugins:maven-plugins from 48 to 49 (#547)
  • d5a438b Fix javadoc
  • 774fac9 Bump org.codehaus.plexus:plexus-archiver from 4.11.0 to 4.12.0
  • b71f403 Bump mavenVersion from 3.9.15 to 3.9.16 (#536)
  • 9f2a001 Use plugin version properties (3.x) (#535)
  • 68a978f Bump org.apache.maven.plugins:maven-plugins from 47 to 48 (#534)
  • e105821 Bump commons-io:commons-io from 2.21.0 to 2.22.0 (#529)
  • 953dc1a Bump mavenVersion from 3.9.14 to 3.9.15 (#528)
  • Additional commits viewable in compare view

Updates com.itextpdf:itext-core from 9.7.0 to 9.7.1

Release notes

Sourced from com.itextpdf:itext-core's releases.

iText Core/Community 9.7.1

This is a patch release for iText Core that addresses a security vulnerability in the Jackson JSON dependency. All users on 9.7.0 are encouraged to upgrade.

Improvements

  • DEVSIX-10085 - Bump Jackson dependency to 2.22.1 to fix CVE-2026-54515
Commits

Updates ch.qos.logback:logback-classic from 1.5.38 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • b07adf3 synronized logback-access with future 2.0.14
  • 8381cdc prepare release 1.6.0
  • 15db759 notes on removed deprecated classes, methods and variables.
  • 90ced5a revert removal of support for packaing data
  • 64c5d3f Packaging data is no longer supported. It was rarely used.
  • 5474044 fix failing tests
  • ac484c2 in version 1.6.x target JDK 11
  • 01eaa90 start work on version 1.6.0-SNAPSHOT
  • d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
  • 94ba1a0 improve message in case of version mismatch
  • Additional commits viewable in compare view

Updates com.itextpdf:itext-core from 9.7.0 to 9.7.1

Release notes

Sourced from com.itextpdf:itext-core's releases.

iText Core/Community 9.7.1

This is a patch release for iText Core that addresses a security vulnerability in the Jackson JSON dependency. All users on 9.7.0 are encouraged to upgrade.

Improvements

  • DEVSIX-10085 - Bump Jackson dependency to 2.22.1 to fix CVE-2026-54515
Commits

Updates ch.qos.logback:logback-classic from 1.5.38 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • b07adf3 synronized logback-access with future 2.0.14
  • 8381cdc prepare release 1.6.0
  • 15db759 notes on removed deprecated classes, methods and variables.
  • 90ced5a revert removal of support for packaing data
  • 64c5d3f Packaging data is no longer supported. It was rarely used.
  • 5474044 fix failing tests
  • ac484c2 in version 1.6.x target JDK 11
  • 01eaa90 start work on version 1.6.0-SNAPSHOT
  • d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
  • 94ba1a0 improve message in case of version mismatch
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.38 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • b07adf3 synronized logback-access with future 2.0.14
  • 8381cdc prepare release 1.6.0
  • 15db759 notes on removed deprecated classes, methods and variables.
  • 90ced5a revert removal of support for packaing data
  • 64c5d3f Packaging data is no longer supported. It was rarely used.
  • 5474044 fix failing tests
  • ac484c2 in version 1.6.x target JDK 11
  • 01eaa90 start work on version 1.6.0-SNAPSHOT
  • d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
  • 94ba1a0 improve message in case of version mismatch
  • Additional commits viewable in compare view

Updates com.itextpdf:itext-core from 9.7.0 to 9.7.1

Release notes

Sourced from com.itextpdf:itext-core's releases.

iText Core/Community 9.7.1

This is a patch release for iText Core that addresses a security vulnerability in the Jackson JSON dependency. All users on 9.7.0 are encouraged to upgrade.

Improvements

  • DEVSIX-10085 - Bump Jackson dependency to 2.22.1 to fix CVE-2026-54515
Commits

Updates ch.qos.logback:logback-classic from 1.5.38 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • b07adf3 synronized logback-access with future 2.0.14
  • 8381cdc prepare release 1.6.0
  • 15db759 notes on removed deprecated classes, methods and variables.
  • 90ced5a revert removal of support for packaing data
  • 64c5d3f Packaging data is no longer supported. It was rarely used.
  • 5474044 fix failing tests
  • ac484c2 in version 1.6.x target JDK 11
  • 01eaa90 start work on version 1.6.0-SNAPSHOT
  • d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
  • 94ba1a0 improve message in case of version mismatch
  • Additional commits viewable in compare view

Updates com.itextpdf:itext-core from 9.7.0 to 9.7.1

Release notes

Sourced from com.itextpdf:itext-core's releases.

iText Core/Community 9.7.1

This is a patch release for iText Core that addresses a security vulnerability in the Jackson JSON dependency. All users on 9.7.0 are encouraged to upgrade.

Improvements

  • DEVSIX-10085 - Bump Jackson dependency to 2.22.1 to fix CVE-2026-54515
Commits

Updates ch.qos.logback:logback-classic from 1.5.38 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • b07adf3 synronized logback-access with future 2.0.14
  • 8381cdc prepare release 1.6.0
  • 15db759 notes on removed deprecated classes, methods and variables.
  • 90ced5a revert removal of support for packaing data
  • 64c5d3f Packaging data is no longer supported. It was rarely used.
  • 5474044 fix failing tests
  • ac484c2 in version 1.6.x target JDK 11
  • 01eaa90 start work on version 1.6.0-SNAPSHOT
  • d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
  • 94ba1a0 improve message in case of version mismatch
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.38 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • b07adf3 synronized logback-access with future 2.0.14
  • 8381cdc prepare release 1.6.0
  • 15db759 notes on removed deprecated classes, methods and variables.
  • 90ced5a revert removal of support for packaing data
  • 64c5d3f Packaging data is no longer supported. It was rarely used.
  • 5474044 fix failing tests
  • ac484c2 in version 1.6.x target JDK 11
  • 01eaa90 start work on version 1.6.0-SNAPSHOT
  • d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
  • 94ba1a0 improve message in case of version mismatch
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.38 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • b07adf3 synronized logback-access with future 2.0.14
  • 8381cdc prepare release 1.6.0
  • 15db759 notes on removed deprecated classes, methods and variables.
  • 90ced5a revert removal of support for packaing data
  • 64c5d3f Packaging data is no longer supported. It was rarely used.
  • 5474044 fix failing tests
  • ac484c2 in version 1.6.x target JDK 11
  • 01eaa90 start work on version 1.6.0-SNAPSHOT
  • d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
  • 94ba1a0 improve message in case of version mismatch
  • Additional commits viewable in compare view

Updates ch.qos.logback:logback-classic from 1.5.38 to 1.6.0

Release notes

Sourced from ch.qos.logback:logback-classic's releases.

Logback 1.6.0

2026-07-23 Release of logback version 1.6.0

• Removed certain deprecated variables, methods, and classes. For the list of removed members see release_1.6.0.txt.

• In AsyncAppenderBase, the put(ILoggingEvent) method now has the protected modifier to allow access from derived classes. This change was requested by Thomas Skjølberg in pr#1053.

• Bump SLF4J dependency to version 2.0.18.

• See also the overview of the 1.6.x series.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit b07adf36019b51a10f824fdd94009985c587b1d3 associated with the tag v_1.6.0. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits
  • b07adf3 synronized logback-access with future 2.0.14
  • 8381cdc prepare release 1.6.0
  • 15db759 notes on removed deprecated classes, methods and variables.
  • 90ced5a revert removal of support for packaing data
  • 64c5d3f Packaging data is no longer supported. It was rarely used.
  • 5474044 fix failing tests
  • ac484c2 in version 1.6.x target JDK 11
  • 01eaa90 start work on version 1.6.0-SNAPSHOT
  • d5e658c Allow subclasses to use put(ILoggingEvent) by making method access protected
  • 94ba1a0 improve message in case of version mismatch
  • Additional commits viewable in compare view

@dependabot dependabot Bot added dependencies Pull requests that update a dependency maven Java/Maven dependency updates labels Jul 27, 2026
@dependabot
dependabot Bot requested a review from DemchaAV as a code owner July 27, 2026 04:33
@dependabot dependabot Bot added dependencies Pull requests that update a dependency maven Java/Maven dependency updates labels Jul 27, 2026
@dependabot
deps(deps): bump the maven-minor-patch group across 3 directories wit…
b129028 
…h 3 updates

Bumps the maven-minor-patch group with 3 updates in the / directory: [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback), [org.apache.maven.plugins:maven-jar-plugin](https://github.com/apache/maven-jar-plugin) and [com.itextpdf:itext-core](https://github.com/itext/itext7).
Bumps the maven-minor-patch group with 2 updates in the /benchmarks directory: [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) and [com.itextpdf:itext-core](https://github.com/itext/itext7).
Bumps the maven-minor-patch group with 1 update in the /examples directory: [ch.qos.logback:logback-classic](https://github.com/qos-ch/logback).


Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.0)

Updates `org.apache.maven.plugins:maven-jar-plugin` from 3.5.0 to 3.5.1
- [Release notes](https://github.com/apache/maven-jar-plugin/releases)
- [Commits](apache/maven-jar-plugin@maven-jar-plugin-3.5.0...maven-jar-plugin-3.5.1)

Updates `com.itextpdf:itext-core` from 9.7.0 to 9.7.1
- [Release notes](https://github.com/itext/itext7/releases)
- [Commits](itext/itext-java@9.7.0...9.7.1)

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.0)

Updates `com.itextpdf:itext-core` from 9.7.0 to 9.7.1
- [Release notes](https://github.com/itext/itext7/releases)
- [Commits](itext/itext-java@9.7.0...9.7.1)

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.0)

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.0)

Updates `com.itextpdf:itext-core` from 9.7.0 to 9.7.1
- [Release notes](https://github.com/itext/itext7/releases)
- [Commits](itext/itext-java@9.7.0...9.7.1)

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.0)

Updates `com.itextpdf:itext-core` from 9.7.0 to 9.7.1
- [Release notes](https://github.com/itext/itext7/releases)
- [Commits](itext/itext-java@9.7.0...9.7.1)

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.0)

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.0)

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.0)

Updates `ch.qos.logback:logback-classic` from 1.5.38 to 1.6.0
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](qos-ch/logback@v_1.5.38...v_1.6.0)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: ch.qos.logback:logback-classic
  dependency-version: 1.6.0
  dependency-type: direct:production
  update-type: version-update:semver-minor
  dependency-group: maven-minor-patch
- dependency-name: com.itextpdf:itext-core
  dependency-version: 9.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: com.itextpdf:itext-core
  dependency-version: 9.7.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
- dependency-name: org.apache.maven.plugins:maven-jar-plugin
  dependency-version: 3.5.1
  dependency-type: direct:production
  update-type: version-update:semver-patch
  dependency-group: maven-minor-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/develop/maven-minor-patch-29cddd7c59 branch from c84a140 to b129028 Compare July 27, 2026 09:08
@DemchaAV
DemchaAV merged commit 6c33d93 into develop Jul 27, 2026
12 checks passed
@DemchaAV
DemchaAV deleted the dependabot/maven/develop/maven-minor-patch-29cddd7c59 branch July 27, 2026 09:13
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

@DemchaAV DemchaAV Awaiting requested review from DemchaAV DemchaAV is a code owner

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency maven Java/Maven dependency updates

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@DemchaAV