Skip to content

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Nov 3, 2025

Bumps log4j.override.version from 2.0.16 to 1.7.33.
Updates org.slf4j:slf4j-api from 2.0.16 to 1.7.33

Commits
  • 2758a97 prepare release 1.7.33
  • a0681b7 fix SLF4J-499
  • c89dc3d Merge branch '1.7-maintenance' of github.com:qos-ch/slf4j into 1.7-maintenance
  • 0d2bd39 add slf4j-reload4j module
  • ae9ee00 start work on 1.7.33-SNAPSHOT
  • 0d87748 this is version 1.7.32
  • 49f2424 make CONFIG_PARAMS aa final field
  • e4fd949 improvements to SLF4J-515
  • b6fb6e3 changes after feedback from Tibor Digana
  • 816da3d fixing SLF4J-515
  • Additional commits viewable in compare view

Updates org.slf4j:slf4j-log4j12 from 1.7.29 to 1.7.33

Commits
  • 2758a97 prepare release 1.7.33
  • a0681b7 fix SLF4J-499
  • c89dc3d Merge branch '1.7-maintenance' of github.com:qos-ch/slf4j into 1.7-maintenance
  • 0d2bd39 add slf4j-reload4j module
  • ae9ee00 start work on 1.7.33-SNAPSHOT
  • 0d87748 this is version 1.7.32
  • 49f2424 make CONFIG_PARAMS aa final field
  • e4fd949 improvements to SLF4J-515
  • b6fb6e3 changes after feedback from Tibor Digana
  • 816da3d fixing SLF4J-515
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `log4j.override.version` from 2.0.16 to 1.7.33.

Updates `org.slf4j:slf4j-api` from 2.0.16 to 1.7.33
- [Release notes](https://github.com/qos-ch/slf4j/releases)
- [Commits](qos-ch/slf4j@v_2.0.16...v_1.7.33)

Updates `org.slf4j:slf4j-log4j12` from 1.7.29 to 1.7.33
- [Release notes](https://github.com/qos-ch/slf4j/releases)
- [Commits](qos-ch/slf4j@v_1.7.29...v_1.7.33)

---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 1.7.33
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.slf4j:slf4j-log4j12
  dependency-version: 1.7.33
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 3, 2025
@github-actions
Copy link

github-actions bot commented Nov 3, 2025

PR: #15
Mode: squash
Topic: GH-sandbox-15
Change-Ids:
Ic5c5a45fc718594a786220bcf682790f796d497e
Digest: b6604fdfab0a
GitHub-Hash: c87e22e80bba1d63

@github-actions
Copy link

github-actions bot commented Nov 3, 2025

Change raised in Gerrit by GitHub2Gerrit: https://gerrit.linuxfoundation.org/infra/c/sandbox/+/73838

@github-actions
Copy link

github-actions bot commented Nov 3, 2025

Auto-closing pull request

@github-actions github-actions bot closed this Nov 3, 2025
@dependabot @github
Copy link
Contributor Author

dependabot bot commented on behalf of github Nov 3, 2025

OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot dependabot bot deleted the dependabot/maven/log4j.override.version-1.7.33 branch November 3, 2025 10:52
lfit-replication pushed a commit that referenced this pull request Dec 3, 2025
…m 2.6 to 3.3.1

Bumps org.apache.maven.plugins:maven-resources-plugin from 2.6 to 3.3.1.
## Release notes

Sourced from org.apache.maven.plugins:maven-resources-plugin's releases.

3.3.1

[MRESOURCES-288] - Make tests-jar reproducible (#56) @​cstamas
[MRESOURCES-297] - Update to parent POM 39, reformat (#55) @​cstamas
[MRESOURCES-293] - Make resources param not read-only (#54) @​cstamas
[MRESOURCES-295] - Drop Plexus legacy code (#53) @​cstamas
[MRESOURCES-294] - Upgrade plexus-utils to 3.5.1 (#52) @​slachiewicz

🚨 Removed

remove specific IDE m2e files (#40) @​olamy

📦 Dependency updates

Bump apache/maven-gh-actions-shared from 2 to 3 (#46) @​dependabot

📝 Documentation updates

doc: adds alternative variable syntax using @ delimiters to the documentation (#36) @​kevin0x90

3.3.0

📦 Dependency updates

Bump maven-filtering from 3.2.0 to 3.3.0 (#32) @​dependabot
Bump plexus-utils from 3.4.1 to 3.4.2 (#28) @​dependabot
Bump commons-io from 1.4 to 2.7 in /src/it/user-filters (#18) @​dependabot
[MRESOURCES-282] - Bump parent-pom from 34 to 36 (#24) @​slachiewicz

📝 Documentation updates

(doc) Fix XML formatting (#26) @​pzygielo
(doc) Fix XML formatting (#15) @​pzygielo

👻 Maintenance

add release drafter (#29) @​olamy
[MRESOURCES-277] - Update plugin (requires Maven 3.2.5+) - Java 8 (#23) @​slachiewicz
[MRESOURCES-283] - Require Java 8 and upgrade deps (#22) @​slachiewicz

3.2.0
What's Changed

[MRESOURCES-259] update commons-io by @​elharo in apache/maven-resources-plugin#1
add .checkstyle to .gitignore by @​elharo in apache/maven-resources-plugin#2
close file by @​elharo in apache/maven-resources-plugin#3
[MRESOURCES-261] update to Maven 3.1 by @​elharo in apache/maven-resources-plugin#4
try with resources by @​elharo in apache/maven-resources-plugin#5
future proof method that is marked for incompatible change by @​elharo in apache/maven-resources-plugin#6

New Contributors

... (truncated)

## Commits

978ce1e [maven-release-plugin] prepare release maven-resources-plugin-3.3.1
b7cd080 [MRESOURCES-296] Upgrade to maven-filtering 3.3.1
1c9f610 [MRESOURCES-288] Make tests-jar reproducible (#56)
1946127 [MRESOURCES-293] Rollback
f7a6f22 [MRESOURCES-297] Update to parent POM 39, reformat (#55)
22d64ca remove specific IDE m2e files (#40)
02c2d01 [MRESOURCES-293] Make resources param not read-only (#54)
6bb3e1f [MRESOURCES-295] Drop Plexus legacy code (#53)
df7e172 [MRESOURCES-294] Upgrade plexus-utils to 3.5.1
9354ecd Bump apache/maven-gh-actions-shared from 2 to 3
Additional commits viewable in compare view

![Dependabot compatibility score](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Issue-ID: CIMAN-33
Signed-off-by: dependabot[bot] <support@github.com>
Signed-off-by: lfit.gh2gerrit <releng+lfit-gh2gerrit@linuxfoundation.org>
Change-Id: I7ec3f0f8fb35c0771c23e8199cea48b265706f0b
GitHub-PR: #23
GitHub-Hash: d4984246f920c32a
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant