Bump ch.qos.logback:logback-core from 1.5.20 to 1.5.23 in /test/fixtures/hdfs-fixture by dependabot[bot] · Pull Request #20303 · opensearch-project/OpenSearch

dependabot · 2025-12-22T13:02:03Z

Bumps ch.qos.logback:logback-core from 1.5.20 to 1.5.23.

Release notes

Sourced from ch.qos.logback:logback-core's releases.

Logback 1.5.23

2025-12-21 Release of logback version 1.5.23

• In response to issues/959 file name collisions are detected at configuration time by analyzing the configuration file and no longer at run time. This avoids the ConcurrentModificationException reported in the issue.

• ZIP and XZ compression now use a BufferedOutputStream when writing to the compressed file. This issue was reported in issues/988.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 0bcc3feb54a6d99caac70969ee5f8334aad1fbaf associated with the tag v_1.5.23. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.22

2025-12-11 Release of logback version 1.5.22

• In order to prevent involuntary information leakage, Logback will no longer output the value of a substituted variable, if the variable name contains any of the case-insensitive strings "password", "secret" or "confidential". This problem was reported by Chintan Rohila in issues/986.

• Logback now takes the overridden toString() method of Throwable subclasses into account when printing stack traces. This issue was reported in LOGBACK-543 by Alvin Chee, with a fix provided in PR 404 by Brett Kail.

• Instead of limit-counting guard, Logback now uses a tumbling-window guard to rate limit internal error messages.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 572379aabd2f672b49593e4020696c624541e5b0 associated with the tag v_1.5.22. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Logback 1.5.21

2025-11-10 Release of logback version 1.5.21

• Invocations of turbo filters in isDebugEnabled, isInfoEnabled()... remain as they were, untouched. However, any installed instances of TurboFilter are now invoked also from within the log(LoggingEvent) method of Logger with the contents of the LoggingEvent, typically via the fluent API. This fixes issues/871.

• Removed reentry-guard in most subclasses of UnsynchronizedAppenderBase where it was not needed.

• Initialization procedure has been simplified by removing the step instantiating a SerializedModelConfigurator. However, it is still possible to set up SerializedModelConfigurator as a custom configurator.

• JsonEncoder is now friendlier to derivation by sub-classes as requested in issues/979.

• Fixed XMLLayout thread safety issue reported in LOGBACK-427.

• Removed superfluous buffering in Zip, GZ and XZ compression code.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit fed6f37ffe3449e40f6a9fffe050936a33116bd1 associated with the tag v_1.5.21. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

0bcc3fe prepare release 1.5.23
4627dbd better to use BufferedOutputStream during ZIP and XZ compression, especially ...
299f091 add collision test in presence of conditional processing
b446f3f In Context, remove collision map
a3eb14d in response to issues/959, collision detection is now done by FileCollisionAn...
681b2be remove unused method, minor comment edits
17a3edf start work on 1.5.23-SNAPSHOT
572379a prepare release 1.5.22
39d17ea fix status printing of variable substitution when the variable name contains ...
75509a9 fix PR 404, LOGBACK-543
Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

@dependabot rebase will rebase this PR
@dependabot recreate will recreate this PR, overwriting any edits that have been made to it
@dependabot merge will merge this PR after your CI passes on it
@dependabot squash and merge will squash and merge this PR after your CI passes on it
@dependabot cancel merge will cancel a previously requested merge and block automerging
@dependabot reopen will reopen this PR if it is closed
@dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
@dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
@dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
@dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Summary by CodeRabbit

Chores
- Updated Logback dependency versions from 1.5.20 to 1.5.23 across project declarations to pick up patch fixes and improvements.
- Added an Unreleased changelog entry documenting the dependency version bump.

_{✏️ Tip: You can customize this high-level summary in your review settings.}

Bumps [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) from 1.5.20 to 1.5.23. - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.20...v_1.5.23) --- updated-dependencies: - dependency-name: ch.qos.logback:logback-core dependency-version: 1.5.23 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>

coderabbitai · 2025-12-22T13:02:33Z

Walkthrough

Bumps Logback dependency versions from 1.5.20 to 1.5.23 in a test fixture Gradle file and adds an Unreleased changelog entry; only version strings and changelog text changed, no code or build logic modifications.

Changes

Cohort / File(s)	Summary
Logback version bump `test/fixtures/hdfs-fixture/build.gradle`, `CHANGELOG.md`	Updated Logback dependency versions from `1.5.20` to `1.5.23` in the HDFS test fixture Gradle file and added an Unreleased changelog line documenting the bump. No code or build behavior changes.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

Files are limited and changes are only version-string updates; review mainly for correct version and changelog formatting.

Possibly related PRs

Bump org.apache.kerby:kerb-admin from 2.1.0 to 2.1.1 in /test/fixtures/hdfs-fixture #20235 — Updates dependency versions in the same Gradle dependencies block (test/fixtures/hdfs-fixture/build.gradle).

Suggested reviewers

msfroh
sandeshkr419

Poem

🐰✨ I hopped through the build with careful cheer,
Swapped two numbers, nothing else to fear.
Logback rose to 1.5.23 today,
Tests will hum the same steady way.
🥕

Pre-merge checks and finishing touches

❌ Failed checks (1 warning)

Check name	Status	Explanation	Resolution
Description check	⚠️ Warning	The description lacks required sections from the template (Description, Related Issues, Check List) and does not follow the repository's PR description template structure.	Add a Description section explaining the change, specify Related Issues (e.g., Resolves #20303), and complete the Check List to align with the repository template.

✅ Passed checks (2 passed)

Check name	Status	Explanation
Title check	✅ Passed	The title clearly and specifically describes the main change: bumping logback-core from 1.5.20 to 1.5.23 in the specified test fixture module.
Docstring Coverage	✅ Passed	No functions found in the changed files to evaluate docstring coverage. Skipping docstring coverage check.

✨ Finishing touches

🧪 Generate unit tests (beta)

Create PR with unit tests
Post copyable unit tests in a comment
Commit unit tests in branch dependabot/gradle/test/fixtures/hdfs-fixture/ch.qos.logback-logback-core-1.5.23

📜 Recent review details

Configuration used: defaults

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 2f31875 and 909549f.

📒 Files selected for processing (1)

CHANGELOG.md

🚧 Files skipped from review as they are similar to previous changes (1)

CHANGELOG.md

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (21)

GitHub Check: gradle-check
GitHub Check: detect-breaking-change
GitHub Check: precommit (25, macos-15)
GitHub Check: precommit (25, macos-15-intel)
GitHub Check: precommit (25, windows-latest)
GitHub Check: Analyze (java)
GitHub Check: precommit (21, macos-15-intel)
GitHub Check: precommit (21, macos-15)
GitHub Check: precommit (21, ubuntu-latest)
GitHub Check: precommit (25, ubuntu-24.04-arm)
GitHub Check: precommit (21, windows-latest)
GitHub Check: precommit (21, windows-2025, true)
GitHub Check: precommit (21, ubuntu-24.04-arm)
GitHub Check: precommit (25, ubuntu-latest)
GitHub Check: assemble (21, ubuntu-24.04-arm)
GitHub Check: assemble (21, ubuntu-latest)
GitHub Check: assemble (21, windows-latest)
GitHub Check: assemble (25, windows-latest)
GitHub Check: assemble (25, ubuntu-24.04-arm)
GitHub Check: assemble (25, ubuntu-latest)
GitHub Check: dependabot

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

Signed-off-by: dependabot[bot] <support@github.com>

github-actions · 2025-12-22T14:37:39Z

✅ Gradle check result for 10a7b8e: SUCCESS

codecov · 2025-12-22T14:38:00Z

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.18%. Comparing base (be07784) to head (909549f).
⚠️ Report is 1 commits behind head on main.

Additional details and impacted files

@@             Coverage Diff              @@
##               main   #20303      +/-   ##
============================================
+ Coverage     73.16%   73.18%   +0.01%     
+ Complexity    71744    71741       -3     
============================================
  Files          5795     5795              
  Lines        328304   328304              
  Branches      47281    47281              
============================================
+ Hits         240216   240276      +60     
+ Misses        68822    68706     -116     
- Partials      19266    19322      +56

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

…/ch.qos.logback-logback-core-1.5.23 Signed-off-by: Craig Perkins <cwperx@amazon.com>

github-actions · 2025-12-22T17:07:43Z

❌ Gradle check result for 2f31875: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

…/ch.qos.logback-logback-core-1.5.23 Signed-off-by: Craig Perkins <cwperx@amazon.com>

github-actions · 2025-12-22T19:42:22Z

✅ Gradle check result for 909549f: SUCCESS

…res/hdfs-fixture (opensearch-project#20303) * Bump ch.qos.logback:logback-core in /test/fixtures/hdfs-fixture Bumps [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) from 1.5.20 to 1.5.23. - [Release notes](https://github.com/qos-ch/logback/releases) - [Commits](qos-ch/logback@v_1.5.20...v_1.5.23) --- updated-dependencies: - dependency-name: ch.qos.logback:logback-core dependency-version: 1.5.23 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com> * Update changelog Signed-off-by: dependabot[bot] <support@github.com> --------- Signed-off-by: dependabot[bot] <support@github.com> Signed-off-by: Craig Perkins <cwperx@amazon.com> Co-authored-by: dependabot[bot] <49699333+dependabot[bot]@users.noreply.github.com> Co-authored-by: Craig Perkins <cwperx@amazon.com>

dependabot bot added dependabot PRs with auto version bumps from dependabot dependencies Pull requests that update a dependency file patch labels Dec 22, 2025

dependabot bot requested a review from a team as a code owner December 22, 2025 13:02

dependabot bot added patch dependencies Pull requests that update a dependency file dependabot PRs with auto version bumps from dependabot labels Dec 22, 2025

Update changelog

10a7b8e

Signed-off-by: dependabot[bot] <support@github.com>

Merge branch 'main' into dependabot/gradle/test/fixtures/hdfs-fixture…

2f31875

…/ch.qos.logback-logback-core-1.5.23 Signed-off-by: Craig Perkins <cwperx@amazon.com>

Merge branch 'main' into dependabot/gradle/test/fixtures/hdfs-fixture…

909549f

…/ch.qos.logback-logback-core-1.5.23 Signed-off-by: Craig Perkins <cwperx@amazon.com>

cwperks approved these changes Dec 22, 2025

View reviewed changes

cwperks merged commit 8a0f3a6 into main Dec 22, 2025
33 checks passed

dependabot bot deleted the dependabot/gradle/test/fixtures/hdfs-fixture/ch.qos.logback-logback-core-1.5.23 branch December 22, 2025 19:52

coderabbitai bot mentioned this pull request Jan 12, 2026

Bump ch.qos.logback:logback-classic from 1.5.23 to 1.5.24 in /test/fixtures/hdfs-fixture #20407

Merged

coderabbitai bot mentioned this pull request Feb 2, 2026

Bump ch.qos.logback:logback-core from 1.5.24 to 1.5.27 in /test/fixtures/hdfs-fixture #20525

Merged

coderabbitai bot mentioned this pull request Feb 16, 2026

Bump ch.qos.logback:logback-core from 1.5.27 to 1.5.32 in /test/fixtures/hdfs-fixture #20637

Closed

This was referenced Feb 18, 2026

[AUTOCUT] Gradle Check Flaky Test Report for PruneFileCacheIT #19724

Open

[AUTOCUT] Gradle Check Flaky Test Report for SegmentReplicationSuiteIT #19258

Open

coderabbitai bot mentioned this pull request Feb 19, 2026

Bump com.azure:azure-storage-blob from 12.31.2 to 12.32.0 in /plugins/repository-azure #19783

Open

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Bump ch.qos.logback:logback-core from 1.5.20 to 1.5.23 in /test/fixtures/hdfs-fixture#20303

Bump ch.qos.logback:logback-core from 1.5.20 to 1.5.23 in /test/fixtures/hdfs-fixture#20303
cwperks merged 4 commits intomainfrom
dependabot/gradle/test/fixtures/hdfs-fixture/ch.qos.logback-logback-core-1.5.23

dependabot bot commented on behalf of github Dec 22, 2025 •

edited by coderabbitai bot

Loading

Uh oh!

coderabbitai bot commented Dec 22, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Dec 22, 2025

Uh oh!

codecov bot commented Dec 22, 2025 •

edited

Loading

Uh oh!

github-actions bot commented Dec 22, 2025

Uh oh!

github-actions bot commented Dec 22, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

Conversation

dependabot bot commented on behalf of github Dec 22, 2025 • edited by coderabbitai bot Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Logback 1.5.23

Logback 1.5.22

Logback 1.5.21

Summary by CodeRabbit

Uh oh!

coderabbitai bot commented Dec 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Walkthrough

Changes

Estimated code review effort

Possibly related PRs

Suggested reviewers

Poem

Pre-merge checks and finishing touches

Uh oh!

github-actions bot commented Dec 22, 2025

Uh oh!

codecov bot commented Dec 22, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Codecov Report

Uh oh!

github-actions bot commented Dec 22, 2025

Uh oh!

github-actions bot commented Dec 22, 2025

Uh oh!

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

1 participant

dependabot bot commented on behalf of github Dec 22, 2025 •

edited by coderabbitai bot

Loading

coderabbitai bot commented Dec 22, 2025 •

edited

Loading

codecov bot commented Dec 22, 2025 •

edited

Loading