Skip to content

Commit

Permalink
Bump org.slf4j:slf4j-api from 1.7.36 to 2.0.16 (#364)
Browse files Browse the repository at this point in the history
Bumps org.slf4j:slf4j-api from 1.7.36 to 2.0.16.

[![Dependabot compatibility score](https://dependabot-badges.githubapp.com/badges/compatibility_score?dependency-name=org.slf4j:slf4j-api&package-manager=gradle&previous-version=1.7.36&new-version=2.0.16)](https://docs.github.com/en/github/managing-security-vulnerabilities/about-dependabot-security-updates#about-compatibility-scores)

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting `@dependabot rebase`.

[//]: # (dependabot-automerge-start)
[//]: # (dependabot-automerge-end)

---

<details>
<summary>Dependabot commands and options</summary>
<br />

You can trigger Dependabot actions by commenting on this PR:
- `@dependabot rebase` will rebase this PR
- `@dependabot recreate` will recreate this PR, overwriting any edits that have been made to it
- `@dependabot merge` will merge this PR after your CI passes on it
- `@dependabot squash and merge` will squash and merge this PR after your CI passes on it
- `@dependabot cancel merge` will cancel a previously requested merge and block automerging
- `@dependabot reopen` will reopen this PR if it is closed
- `@dependabot close` will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
- `@dependabot show <dependency name> ignore conditions` will show all of the ignore conditions of the specified dependency
- `@dependabot ignore this major version` will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this minor version` will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
- `@dependabot ignore this dependency` will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

</details>
  • Loading branch information
big-andy-coates authored Sep 16, 2024
1 parent 74baa9a commit ea61df5
Show file tree
Hide file tree
Showing 3 changed files with 4 additions and 9 deletions.
4 changes: 1 addition & 3 deletions build.gradle.kts
Original file line number Diff line number Diff line change
Expand Up @@ -79,9 +79,7 @@ subprojects {
testImplementation("org.junit-pioneer:junit-pioneer:$junitPioneerVersion")
testImplementation("org.mockito:mockito-junit-jupiter:$mockitoVersion")
testImplementation("com.google.guava:guava-testlib:$guavaVersion")
// An old v1.x SLF4J impl as required by mbknor-jackson-jsonschema
// Can be updated once https://github.com/mbknor/mbknor-jackson-jsonSchema/pull/172 is resolved:
testRuntimeOnly("org.apache.logging.log4j:log4j-slf4j-impl:$log4jVersion")
testRuntimeOnly("org.apache.logging.log4j:log4j-slf4j2-impl:$log4jVersion")
testRuntimeOnly("org.junit.jupiter:junit-jupiter-engine:$junitVersion")
}
}
Expand Down
8 changes: 2 additions & 6 deletions generator/build.gradle.kts
Original file line number Diff line number Diff line change
Expand Up @@ -45,12 +45,8 @@ dependencies {
implementation("com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:$jacksonVersion")
implementation("com.kjetland:mbknor-jackson-jsonschema_2.13:$jsonSchemaVersion")
implementation("io.github.classgraph:classgraph:$classGraphVersion")
implementation("org.apache.logging.log4j:log4j-core:$log4jVersion")
implementation("org.apache.logging.log4j:log4j-slf4j-impl:$log4jVersion") {
because("An old v1.x SLF4J impl is required by mbknor-jackson-jsonschema" +
"until https://github.com/mbknor/mbknor-jackson-jsonSchema/pull/172 is resolved:")
}
implementation("org.slf4j:slf4j-api:1.7.36")
implementation("org.apache.logging.log4j:log4j-slf4j2-impl:$log4jVersion")
implementation("org.slf4j:slf4j-api:2.0.16")

// The following are set to bring in dependency versions beyond known security vulnerabilities:
// The following can be removed once https://github.com/mbknor/mbknor-jackson-jsonSchema/issues/174 is resolved:
Expand Down
1 change: 1 addition & 0 deletions generator/src/main/java/module-info.java
Original file line number Diff line number Diff line change
Expand Up @@ -5,6 +5,7 @@
requires creek.base.schema;
requires info.picocli;
requires org.apache.logging.log4j;
requires org.slf4j;
requires java.management;
requires com.fasterxml.jackson.annotation;
requires com.fasterxml.jackson.databind;
Expand Down

0 comments on commit ea61df5

Please sign in to comment.