René's URL Explorer Experiment

Title: Bump logback.version from 1.2.3 to 1.5.28 by dependabot[bot] · Pull Request #2586 · docker-java/docker-java · GitHub

Open Graph Title: Bump logback.version from 1.2.3 to 1.5.28 by dependabot[bot] · Pull Request #2586 · docker-java/docker-java

X Title: Bump logback.version from 1.2.3 to 1.5.28 by dependabot[bot] · Pull Request #2586 · docker-java/docker-java

Description: Bumps logback.version from 1.2.3 to 1.5.28. Updates ch.qos.logback:logback-core from 1.2.3 to 1.5.28 Release notes Sourced from ch.qos.logback:logback-core's releases. Logback 1.5.28 2026-02-06 Release of logback version 1.5.28 • Appender names or appender references are no longer subject to variable substitution. • Fixed issue with configurations with conditionals encompassing appenders. This was reported in issues/1016 reported by Sergey Sazonov. • The element now admits a 'scan' attribute which can be used to override the 'scan' attribute in the element. • Fixed NullPointerException thrown by VersionUtil.checkForVersionEquality method occurring with GraalVM Native Images. This issue was reported in issues/1014. • A bit-wise identical binary of this version can be reproduced by building from source code at commit e7a1855ab562bb102333f754603ff89359bf3cfc associated with the tag v_1.5.28. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6. Logback 1.5.27 2026-01-30 Release of logback version 1.5.27 • Updated license to Eclipse Public License version 2.0 from version 1.0, retaining the GPL 2.1 dual-license. • Fixed missing MDC data transmitted by SocketAppender reported in issues/1010 by Lars Vogel. • Removed all Receiver classes and components which were already disabled for several years. • Refactored file scanning code for improved clarity. • In SizeAndTimeBasedRollingPolicy modified totalSizeCap and maxFileSize comparison to taking into account file compression. This fixes issues/1007. • A bit-wise identical binary of this version can be reproduced by building from source code at commit 3618eb01aad6672f9cd250dccf7546a69cbe982f associated with the tag v_1.5.27. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6. Logback 1.5.26 2026-01-25 Release of logback version 1.5.26 • InsertFromJNDIModelHandler was accessing javax.naming package forcing the inclusion of the optional java.naming module. This problem was raised in issues/1003 by Marius Hanl who also provided the relevant PR. • In applications using shadow/fat/shade jars, module or package information could be lost. Thus, in the absence of version information, logback-classic would warn about version mismatches. Logback components now ship with properties files containing version information that survive shadow/fat/shade jars. This issue was reporteed in issues/1002 by Christoph Gritschenberger. • A bit-wise identical binary of this version can be reproduced by building from source code at commit 33deb54506bbfaf1ff151f26f3a5f86936011619 associated with the tag v_1.5.26. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6. Logback 1.5.25 2026-01-17 Release of logback version 1.5.25 • When processing configuration files, logback-core will now only instantiate components compatible with the class expected by the encapsulating class. This fixes an ACE vulnerability recorded as CVE-2026-1225. • In configuration files, referencing a single undeclared appender would cause all referenced appenders to be skipped. This issue was discovered in issues/997. • Added VersionUtil class to logback-core. This utility class checks for version compatibility issues and alerts the user if need be. • Added EpochConverter to output milliseconds/seconds since epoch. This enhancement was requested by Duncan Jauncey in issues/1000 who also provided the relevant implementation PR. • A bit-wise identical binary of this version can be reproduced by building from source code at commit f426e0002800cfb507f393fcacffe0761a425220 associated with the tag v_1.5.25. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6. ... (truncated) Commits e7a1855 prepare release 1.5.28 e8dee44 cosmetic changes only ded504c minor refactoring 8af5459 fix NPE as reported in issues/1014 4f560a0 appender names of references not subject to substitution eab8e1d remove spurious Sytem.out, add javadoc 9ff843d fix issues/1016 769bce0 add scanStr field to PropertiesConfiguratorAction, refactor ResourceAction 6fd0943 add missing package.html in logback-core 5350e54 add missing package.html in logback-classic Additional commits viewable in compare view Updates ch.qos.logback:logback-classic from 1.2.3 to 1.5.28 Release notes Sourced from ch.qos.logback:logback-classic's releases. Logback 1.5.28 2026-02-06 Release of logback version 1.5.28 • Appender names or appender references are no longer subject to variable substitution. • Fixed issue with configurations with conditionals encompassing appenders. This was reported in issues/1016 reported by Sergey Sazonov. • The element now admits a 'scan' attribute which can be used to override the 'scan' attribute in the element. • Fixed NullPointerException thrown by VersionUtil.checkForVersionEquality method occurring with GraalVM Native Images. This issue was reported in issues/1014. • A bit-wise identical binary of this version can be reproduced by building from source code at commit e7a1855ab562bb102333f754603ff89359bf3cfc associated with the tag v_1.5.28. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6. Logback 1.5.27 2026-01-30 Release of logback version 1.5.27 • Updated license to Eclipse Public License version 2.0 from version 1.0, retaining the GPL 2.1 dual-license. • Fixed missing MDC data transmitted by SocketAppender reported in issues/1010 by Lars Vogel. • Removed all Receiver classes and components which were already disabled for several years. • Refactored file scanning code for improved clarity. • In SizeAndTimeBasedRollingPolicy modified totalSizeCap and maxFileSize comparison to taking into account file compression. This fixes issues/1007. • A bit-wise identical binary of this version can be reproduced by building from source code at commit 3618eb01aad6672f9cd250dccf7546a69cbe982f associated with the tag v_1.5.27. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6. Logback 1.5.26 2026-01-25 Release of logback version 1.5.26 • InsertFromJNDIModelHandler was accessing javax.naming package forcing the inclusion of the optional java.naming module. This problem was raised in issues/1003 by Marius Hanl who also provided the relevant PR. • In applications using shadow/fat/shade jars, module or package information could be lost. Thus, in the absence of version information, logback-classic would warn about version mismatches. Logback components now ship with properties files containing version information that survive shadow/fat/shade jars. This issue was reporteed in issues/1002 by Christoph Gritschenberger. • A bit-wise identical binary of this version can be reproduced by building from source code at commit 33deb54506bbfaf1ff151f26f3a5f86936011619 associated with the tag v_1.5.26. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6. Logback 1.5.25 2026-01-17 Release of logback version 1.5.25 • When processing configuration files, logback-core will now only instantiate components compatible with the class expected by the encapsulating class. This fixes an ACE vulnerability recorded as CVE-2026-1225. • In configuration files, referencing a single undeclared appender would cause all referenced appenders to be skipped. This issue was discovered in issues/997. • Added VersionUtil class to logback-core. This utility class checks for version compatibility issues and alerts the user if need be. • Added EpochConverter to output milliseconds/seconds since epoch. This enhancement was requested by Duncan Jauncey in issues/1000 who also provided the relevant implementation PR. • A bit-wise identical binary of this version can be reproduced by building from source code at commit f426e0002800cfb507f393fcacffe0761a425220 associated with the tag v_1.5.25. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6. ... (truncated) Commits e7a1855 prepare release 1.5.28 e8dee44 cosmetic changes only ded504c minor refactoring 8af5459 fix NPE as reported in issues/1014 4f560a0 appender names of references not subject to substitution eab8e1d remove spurious Sytem.out, add javadoc 9ff843d fix issues/1016 769bce0 add scanStr field to PropertiesConfiguratorAction, refactor ResourceAction 6fd0943 add missing package.html in logback-core 5350e54 add missing package.html in logback-classic Additional commits viewable in compare view You can trigger a rebase of this PR by commenting @dependabot rebase. Dependabot commands and options You can trigger Dependabot actions by commenting on this PR: @dependabot rebase will rebase this PR @dependabot recreate will recreate this PR, overwriting any edits that have been made to it @dependabot show ignore conditions will show all of the ignore conditions of the specified dependency @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself) @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Open Graph Description: Bumps logback.version from 1.2.3 to 1.5.28. Updates ch.qos.logback:logback-core from 1.2.3 to 1.5.28 Release notes Sourced from ch.qos.logback:logback-core's releases. Logback 1.5.28 2026-02-...

X Description: Bumps logback.version from 1.2.3 to 1.5.28. Updates ch.qos.logback:logback-core from 1.2.3 to 1.5.28 Release notes Sourced from ch.qos.logback:logback-core's releases. Logback 1.5.28 2026...

Opengraph URL: https://github.com/docker-java/docker-java/pull/2586

X: @github

direct link

Domain: github.com

Links:

Viewport: width=device-width