Skip to content

Conversation

@pull
Copy link

@pull pull bot commented Mar 31, 2025

See Commits and Changes for more details.


Created by pull[bot] (v2.0.0-alpha.1)

Can you help keep this open source service alive? 💖 Please sponsor : )

dependabot bot and others added 5 commits March 31, 2025 18:11
Bumps
[crazy-max/ghaction-import-gpg](https://github.com/crazy-max/ghaction-import-gpg)
from 6.2.0 to 6.3.0.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/crazy-max/ghaction-import-gpg/releases">crazy-max/ghaction-import-gpg's
releases</a>.</em></p>
<blockquote>
<h2>v6.3.0</h2>
<ul>
<li>Bump openpgp from 5.11.2 to 6.1.0 in <a
href="https://redirect.github.com/crazy-max/ghaction-import-gpg/pull/215">crazy-max/ghaction-import-gpg#215</a></li>
<li>Bump cross-spawn from 7.0.3 to 7.0.6 in <a
href="https://redirect.github.com/crazy-max/ghaction-import-gpg/pull/212">crazy-max/ghaction-import-gpg#212</a></li>
</ul>
<p><strong>Full Changelog</strong>: <a
href="https://github.com/crazy-max/ghaction-import-gpg/compare/v6.2.0...v6.3.0">https://github.com/crazy-max/ghaction-import-gpg/compare/v6.2.0...v6.3.0</a></p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/e89d40939c28e39f97cf32126055eeae86ba74ec"><code>e89d409</code></a>
Merge pull request <a
href="https://redirect.github.com/crazy-max/ghaction-import-gpg/issues/215">#215</a>
from crazy-max/dependabot/npm_and_yarn/openpgp-6.1.0</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/92395896039cc60f9e5f7ac1f35556ab8c4c6340"><code>9239589</code></a>
fix README</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/177db9defff00616f84ff376537a20bd7efd4d27"><code>177db9d</code></a>
chore: update generated content</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/78b11f3943d7153b895ce54a200f044602e95a5b"><code>78b11f3</code></a>
build(deps): bump openpgp from 5.11.2 to 6.1.0</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/bc969118f823f29ace21485950c4594e208c1b38"><code>bc96911</code></a>
Merge pull request <a
href="https://redirect.github.com/crazy-max/ghaction-import-gpg/issues/218">#218</a>
from crazy-max/bake-v6</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/b70aa9b384bae860db4f4fee4d87b577eace7842"><code>b70aa9b</code></a>
ci: update bake-action to v6</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/d690cc92b1309e4ece9706ab4ded933b845c40e0"><code>d690cc9</code></a>
Merge pull request <a
href="https://redirect.github.com/crazy-max/ghaction-import-gpg/issues/212">#212</a>
from crazy-max/dependabot/npm_and_yarn/cross-spawn-7.0.6</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/9e887f448293293b7999c107b7c78b46586e8fd5"><code>9e887f4</code></a>
Merge pull request <a
href="https://redirect.github.com/crazy-max/ghaction-import-gpg/issues/211">#211</a>
from crazy-max/dependabot/github_actions/codecov/code...</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/442980b5038724bf9b57c968c2485eec569ab4e8"><code>442980b</code></a>
ci: fix deprecated codecov input</li>
<li><a
href="https://github.com/crazy-max/ghaction-import-gpg/commit/a0098b6990847e04ed88773c24d2ad2adcace4ac"><code>a0098b6</code></a>
Merge pull request <a
href="https://redirect.github.com/crazy-max/ghaction-import-gpg/issues/217">#217</a>
from crazy-max/gha-perms</li>
<li>Additional commits viewable in <a
href="https://github.com/crazy-max/ghaction-import-gpg/compare/v6.2.0...v6.3.0">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=crazy-max/ghaction-import-gpg&package-manager=github_actions&previous-version=6.2.0&new-version=6.3.0)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [com.uber.nullaway:nullaway](https://github.com/uber/NullAway)
from 0.12.3 to 0.12.6.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/uber/NullAway/releases">com.uber.nullaway:nullaway's
releases</a>.</em></p>
<blockquote>
<h2>NullAway 0.12.6</h2>
<ul>
<li>JSpecify: view type as super in generic method inference (<a
href="https://redirect.github.com/uber/NullAway/issues/1177">#1177</a>)</li>
<li>Infer <a
href="https://github.com/Nullable"><code>@​Nullable</code></a> type
arguments for type variables from unmarked code (<a
href="https://redirect.github.com/uber/NullAway/issues/1181">#1181</a>)</li>
<li>Convert android-jar.py to Python 3 (<a
href="https://redirect.github.com/uber/NullAway/issues/1175">#1175</a>)</li>
<li>Suggest castToNonNull fix for unboxing error (<a
href="https://redirect.github.com/uber/NullAway/issues/1182">#1182</a>)</li>
</ul>
<h2>NullAway 0.12.5</h2>
<ul>
<li>Add missing override to RestoreNullnessAnnotationsVisitor (<a
href="https://redirect.github.com/uber/NullAway/issues/1154">#1154</a>)</li>
<li>Add more bailouts for raw types (<a
href="https://redirect.github.com/uber/NullAway/issues/1153">#1153</a>)</li>
<li>Do unboxing check for invocation parameters even when calling a <a
href="https://github.com/NullUnmarked"><code>@​NullUnmarked</code></a>
method (<a
href="https://redirect.github.com/uber/NullAway/issues/1163">#1163</a>)</li>
<li>JSpecify: infer generic method type arguments for assignments (<a
href="https://redirect.github.com/uber/NullAway/issues/1131">#1131</a>)</li>
<li>JSpecify: properly handle lambdas in anonymous inner classes (<a
href="https://redirect.github.com/uber/NullAway/issues/1165">#1165</a>)</li>
<li>Support <a
href="https://github.com/MonotonicNonNull"><code>@​MonotonicNonNull</code></a>
on static fields (<a
href="https://redirect.github.com/uber/NullAway/issues/1166">#1166</a>)</li>
<li>Update to Error Prone 2.37.0 (<a
href="https://redirect.github.com/uber/NullAway/issues/1169">#1169</a>)</li>
<li>Use proper name for constructors in JarInfer (<a
href="https://redirect.github.com/uber/NullAway/issues/1167">#1167</a>)</li>
<li>Don't treat <a
href="https://github.com/ParametricNullness"><code>@​ParametricNullness</code></a>
as <a href="https://github.com/Nullable"><code>@​Nullable</code></a> in
JSpecify mode (<a
href="https://redirect.github.com/uber/NullAway/issues/1174">#1174</a>)</li>
</ul>
<p>Version 0.12.4</p>
<p>Better <a
href="https://github.com/MonotonicNonNull"><code>@​MonotonicNonNull</code></a>
support (<a
href="https://redirect.github.com/uber/NullAway/issues/1149">#1149</a>)
Add support for local variables for arrays. (<a
href="https://redirect.github.com/uber/NullAway/issues/1146">#1146</a>)
Ignore Spring Framework 6.2 <a
href="https://github.com/MockitoBean"><code>@​MockitoBean</code></a>, <a
href="https://github.com/MockitoSpyBean"><code>@​MockitoSpyBean</code></a>
fields (<a
href="https://redirect.github.com/uber/NullAway/issues/1147">#1147</a>)
JSpecify: preserve explicit nullability annotations on type variables
when performing substitutions (<a
href="https://redirect.github.com/uber/NullAway/issues/1143">#1143</a>)
Always acknowledge restrictive annotations in JSpecify mode (<a
href="https://redirect.github.com/uber/NullAway/issues/1144">#1144</a>)
Fix printing of array types in JSpecify errors (<a
href="https://redirect.github.com/uber/NullAway/issues/1145">#1145</a>)
Remove need to use JSpecify's <a
href="https://github.com/Nullable"><code>@​Nullable</code></a>
annotation (<a
href="https://redirect.github.com/uber/NullAway/issues/1142">#1142</a>)
Handle calls to generic constructors in JSpecify mode (<a
href="https://redirect.github.com/uber/NullAway/issues/1141">#1141</a>)
Properly handle conditional expression within parens as RHS of
assignment (<a
href="https://redirect.github.com/uber/NullAway/issues/1140">#1140</a>)
Skip checks involving wildcard generic type arguments (<a
href="https://redirect.github.com/uber/NullAway/issues/1137">#1137</a>)
Update to Gradle 8.12.1 (<a
href="https://redirect.github.com/uber/NullAway/issues/1133">#1133</a>)</p>
</blockquote>
</details>
<details>
<summary>Changelog</summary>
<p><em>Sourced from <a
href="https://github.com/uber/NullAway/blob/master/CHANGELOG.md">com.uber.nullaway:nullaway's
changelog</a>.</em></p>
<blockquote>
<h2>Version 0.12.6</h2>
<ul>
<li>JSpecify: view type as super in generic method inference (<a
href="https://redirect.github.com/uber/NullAway/issues/1177">#1177</a>)</li>
<li>Infer <a
href="https://github.com/Nullable"><code>@​Nullable</code></a> type
arguments for type variables from unmarked code (<a
href="https://redirect.github.com/uber/NullAway/issues/1181">#1181</a>)</li>
<li>Convert android-jar.py to Python 3 (<a
href="https://redirect.github.com/uber/NullAway/issues/1175">#1175</a>)</li>
<li>Suggest castToNonNull fix for unboxing error (<a
href="https://redirect.github.com/uber/NullAway/issues/1182">#1182</a>)</li>
</ul>
<h2>Version 0.12.5</h2>
<ul>
<li>Add missing override to RestoreNullnessAnnotationsVisitor (<a
href="https://redirect.github.com/uber/NullAway/issues/1154">#1154</a>)</li>
<li>Add more bailouts for raw types (<a
href="https://redirect.github.com/uber/NullAway/issues/1153">#1153</a>)</li>
<li>Do unboxing check for invocation parameters even when calling a <a
href="https://github.com/NullUnmarked"><code>@​NullUnmarked</code></a>
method (<a
href="https://redirect.github.com/uber/NullAway/issues/1163">#1163</a>)</li>
<li>JSpecify: infer generic method type arguments for assignments (<a
href="https://redirect.github.com/uber/NullAway/issues/1131">#1131</a>)</li>
<li>JSpecify: properly handle lambdas in anonymous inner classes (<a
href="https://redirect.github.com/uber/NullAway/issues/1165">#1165</a>)</li>
<li>Support <a
href="https://github.com/MonotonicNonNull"><code>@​MonotonicNonNull</code></a>
on static fields (<a
href="https://redirect.github.com/uber/NullAway/issues/1166">#1166</a>)</li>
<li>Update to Error Prone 2.37.0 (<a
href="https://redirect.github.com/uber/NullAway/issues/1169">#1169</a>)</li>
<li>Use proper name for constructors in JarInfer (<a
href="https://redirect.github.com/uber/NullAway/issues/1167">#1167</a>)</li>
<li>Don't treat <a
href="https://github.com/ParametricNullness"><code>@​ParametricNullness</code></a>
as <a href="https://github.com/Nullable"><code>@​Nullable</code></a> in
JSpecify mode (<a
href="https://redirect.github.com/uber/NullAway/issues/1174">#1174</a>)</li>
</ul>
<h2>Version 0.12.4</h2>
<ul>
<li>Better <code>@MonotonicNonNull</code> support (<a
href="https://redirect.github.com/uber/NullAway/issues/1149">#1149</a>)</li>
<li>Add support for local variables for arrays. (<a
href="https://redirect.github.com/uber/NullAway/issues/1146">#1146</a>)</li>
<li>Ignore Spring Framework 6.2 <code>@MockitoBean</code>,
<code>@MockitoSpyBean</code> fields (<a
href="https://redirect.github.com/uber/NullAway/issues/1147">#1147</a>)</li>
<li>JSpecify: preserve explicit nullability annotations on type
variables when performing substitutions (<a
href="https://redirect.github.com/uber/NullAway/issues/1143">#1143</a>)</li>
<li>Always acknowledge restrictive annotations in JSpecify mode (<a
href="https://redirect.github.com/uber/NullAway/issues/1144">#1144</a>)</li>
<li>Fix printing of array types in JSpecify errors (<a
href="https://redirect.github.com/uber/NullAway/issues/1145">#1145</a>)</li>
<li>Remove need to use JSpecify's <a
href="https://github.com/Nullable"><code>@​Nullable</code></a>
annotation (<a
href="https://redirect.github.com/uber/NullAway/issues/1142">#1142</a>)</li>
<li>Handle calls to generic constructors in JSpecify mode (<a
href="https://redirect.github.com/uber/NullAway/issues/1141">#1141</a>)</li>
<li>Properly handle conditional expression within parens as RHS of
assignment (<a
href="https://redirect.github.com/uber/NullAway/issues/1140">#1140</a>)</li>
<li>Skip checks involving wildcard generic type arguments (<a
href="https://redirect.github.com/uber/NullAway/issues/1137">#1137</a>)</li>
<li>Update to Gradle 8.12.1 (<a
href="https://redirect.github.com/uber/NullAway/issues/1133">#1133</a>)</li>
</ul>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/uber/NullAway/commit/649f25ad3116a7c64732fbc7a5d2bc40140b9cdd"><code>649f25a</code></a>
Prepare for release 0.12.6.</li>
<li><a
href="https://github.com/uber/NullAway/commit/93697041244ad165dabe9b49d9b03441bba9dd31"><code>9369704</code></a>
Suggest castToNonNull fix for unboxing error (<a
href="https://redirect.github.com/uber/NullAway/issues/1182">#1182</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/f1aca1b1cbb1373dc1aac7d7e2e930f159237529"><code>f1aca1b</code></a>
Convert android-jar.py to Python 3 (<a
href="https://redirect.github.com/uber/NullAway/issues/1175">#1175</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/33588de748b90848be9259dc799569cfa807704e"><code>33588de</code></a>
Infer <code>@nullable</code> type arguments for type variables from
unmarked code (<a
href="https://redirect.github.com/uber/NullAway/issues/1181">#1181</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/dd0fe71e12e4acdfe4699baba7d7268420ecda30"><code>dd0fe71</code></a>
JSpecify: view type as super in generic method inference (<a
href="https://redirect.github.com/uber/NullAway/issues/1177">#1177</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/2c8049c68cb81ec6cc73377102413e7a95b3fb7a"><code>2c8049c</code></a>
Prepare next development version.</li>
<li><a
href="https://github.com/uber/NullAway/commit/9613fb776f541732121079441b09dc8ac6bfe5db"><code>9613fb7</code></a>
Prepare for release 0.12.5.</li>
<li><a
href="https://github.com/uber/NullAway/commit/b84feb73782daf35c63e36b7c7fc4e19fe4a8a08"><code>b84feb7</code></a>
Don't treat <code>@ParametricNullness</code> as <code>@nullable</code>
in JSpecify mode (<a
href="https://redirect.github.com/uber/NullAway/issues/1174">#1174</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/3da2c82097cfaf7fa8360b95622f762cc5f55cc0"><code>3da2c82</code></a>
Use proper name for constructors in JarInfer (<a
href="https://redirect.github.com/uber/NullAway/issues/1167">#1167</a>)</li>
<li><a
href="https://github.com/uber/NullAway/commit/685065a55d121992e511c313702ab59a12abdac8"><code>685065a</code></a>
Update to Error Prone 2.37.0 (<a
href="https://redirect.github.com/uber/NullAway/issues/1169">#1169</a>)</li>
<li>Additional commits viewable in <a
href="https://github.com/uber/NullAway/compare/v0.12.3...v0.12.6">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.uber.nullaway:nullaway&package-manager=maven&previous-version=0.12.3&new-version=0.12.6)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps [com.github.luben:zstd-jni](https://github.com/luben/zstd-jni)
from 1.5.7-1 to 1.5.7-2.
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/luben/zstd-jni/commit/88892eb44549a214ba4c23459618b9d5d647a44c"><code>88892eb</code></a>
v1.5.7-2</li>
<li><a
href="https://github.com/luben/zstd-jni/commit/7b52f9b6d3912ddb59ce3ffb7e26e635bcfa71db"><code>7b52f9b</code></a>
indentation</li>
<li><a
href="https://github.com/luben/zstd-jni/commit/cdd20becaad29372922b33c2762183bdf4726598"><code>cdd20be</code></a>
Fix lock acquisition</li>
<li><a
href="https://github.com/luben/zstd-jni/commit/15e5eee8b871add5a50a0c53ae5167668455170f"><code>15e5eee</code></a>
Support decompression from byte array to ByteBuffer and vice-versa</li>
<li>See full diff in <a
href="https://github.com/luben/zstd-jni/compare/v1.5.7-1...v1.5.7-2">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=com.github.luben:zstd-jni&package-manager=maven&previous-version=1.5.7-1&new-version=1.5.7-2)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Bumps
[ch.qos.logback:logback-classic](https://github.com/qos-ch/logback) from
1.5.16 to 1.5.18.
<details>
<summary>Release notes</summary>
<p><em>Sourced from <a
href="https://github.com/qos-ch/logback/releases">ch.qos.logback:logback-classic's
releases</a>.</em></p>
<blockquote>
<h2>Logback 1.5.18</h2>
<p><strong>2025-03-18 Release of logback version 1.5.18</strong></p>
<p>• Added<a
href="https://logback.qos.ch/manual/appenders.html#fileCompression">
support for XZ compression</a> for archived log files. Note that XZ
compression requires Tukaani project's <a
href="https://tukaani.org/xz/java.html">XZ library</a> for Java. In case
XZ compression is requested but the XZ library is missing, then logback
will substitute GZ compression as a fallback. This feature was requested
in issues/755.</p>
<p>• Removed references to <code>java.security.AccessController</code>
class. This class has been deprecated for some time and is slated for
removal in future JDK versions.</p>
<p>• A bit-wise identical binary of this version can be reproduced by
building from source code at commit
b2a02f065379a9b1ba5ff837fc08913b744774bc associated with the tag
v_1.5.18. Release built using Java &quot;21&quot; 2023-10-17 LTS build
21.0.1.+12-LTS-29 under Linux Debian 11.6.</p>
<h2>Logback 1.5.17</h2>
<p><strong>2025-02-25 Release of logback version 1.5.17</strong></p>
<p>• Fixed Jansi 2.4.0 color-coded output not working on Windows CMD.exe
console when the default terminal application is set to &quot;Windows
Console Host&quot;. This problem was reported in issues/753 by Michael
Lyubkin.</p>
<p>• Fixed race condition occurring in case MDC class is initialized
while org.slf4j.LoggerFactory is initializing logback-classic's
LoggerContext. When this race conditions occurs, the MDCAdapter instance
used by MDC does not match the instance used by logback-classic. This
issue was reported in SLF4J issues/450. While logback-classic version
1.5.17 remains compatible with SLF4J versions in the 2.0.x series,
fixing this particular MDC issue requires SLF4J version 2.0.17.</p>
<p>• A bit-wise identical binary of this version can be reproduced by
building from source code at commit
10358724ed723b3745c010aa40cb02a2dfed4593 associated with the tag
v_1.5.17. Release built using Java &quot;21&quot; 2023-10-17 LTS build
21.0.1.+12-LTS-29 under Linux Debian 11.6.</p>
</blockquote>
</details>
<details>
<summary>Commits</summary>
<ul>
<li><a
href="https://github.com/qos-ch/logback/commit/b2a02f065379a9b1ba5ff837fc08913b744774bc"><code>b2a02f0</code></a>
prepare release 1.5.18</li>
<li><a
href="https://github.com/qos-ch/logback/commit/991de5828b2afc2ddb8fbc7b233bd660096d793f"><code>991de58</code></a>
remove references to AccessController marked for deletion in the
JDK</li>
<li><a
href="https://github.com/qos-ch/logback/commit/f54ab16c8436475f16579e887c1305506212ac5a"><code>f54ab16</code></a>
If compression mode is XZ but the XZ library is missing, then fallback
to GZ ...</li>
<li><a
href="https://github.com/qos-ch/logback/commit/fb45971e5457296abfcf706322a06563fb3df62a"><code>fb45971</code></a>
add support for XZ compression</li>
<li><a
href="https://github.com/qos-ch/logback/commit/31c1f55a1bf177922cf6a3c609a9d379f12d0693"><code>31c1f55</code></a>
add xz compression support with tests</li>
<li><a
href="https://github.com/qos-ch/logback/commit/8968d0fd43d065f2f0e63b6679e59c89e0c2a8b8"><code>8968d0f</code></a>
introduce strategy based compression</li>
<li><a
href="https://github.com/qos-ch/logback/commit/834059cb64ea8a6ca6e51c78fa0ac2b2797df0ed"><code>834059c</code></a>
start work on 1.5.18-SNAPSHOT</li>
<li><a
href="https://github.com/qos-ch/logback/commit/10358724ed723b3745c010aa40cb02a2dfed4593"><code>1035872</code></a>
prepare release 1.5.17</li>
<li><a
href="https://github.com/qos-ch/logback/commit/2e6984d1e16c78c703a62bf2789a9c157d7bc050"><code>2e6984d</code></a>
bump to slf4j version 2.0.17</li>
<li><a
href="https://github.com/qos-ch/logback/commit/100995244bf75ded9cb51bade91f84e63f349474"><code>1009952</code></a>
use a new LoggerContert instance when running LogbackListenerTest. This
shoul...</li>
<li>Additional commits viewable in <a
href="https://github.com/qos-ch/logback/compare/v_1.5.16...v_1.5.18">compare
view</a></li>
</ul>
</details>
<br />


[![Dependabot compatibility
score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=ch.qos.logback:logback-classic&package-manager=maven&previous-version=1.5.16&new-version=1.5.18)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't
alter it yourself. You can also trigger a rebase manually by commenting
`@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits
that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after
your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge
and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating
it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all
of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop
Dependabot creating any more for this major version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop
Dependabot creating any more for this minor version (unless you reopen
the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop
Dependabot creating any more for this dependency (unless you reopen the
PR or upgrade to it yourself)


</details>

Signed-off-by: dependabot[bot] <support@github.com>
Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com>
Dependabot creates a separate PR for each dependency, which has broken
the final release builds many times. It will be disabled for the time
being until a better way to manage dependency upgrades is implemented,
@pull pull bot added the ⤵️ pull label Mar 31, 2025
@pull pull bot merged commit 4fea3f7 into Mu-L:main Mar 31, 2025
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant