Skip to content

Upgrade logback-classic to 1.6.0 and maven-jar-plugin to 3.5.1 - #161

Merged
bernardladenthin merged 1 commit into
mainfrom
claude/baf-audit-repos-b6hldq
Jul 24, 2026
Merged

Upgrade logback-classic to 1.6.0 and maven-jar-plugin to 3.5.1#161
bernardladenthin merged 1 commit into
mainfrom
claude/baf-audit-repos-b6hldq

Conversation

@bernardladenthin

Copy link
Copy Markdown
Owner

Summary

  • Upgrade ch.qos.logback:logback-classic from 1.5.38 to 1.6.0 in the parent POM's dependency management, ensuring the managed version takes precedence over transitive dependencies and satisfying maven-enforcer's DependencyConvergence rule.
  • Upgrade org.apache.maven.plugins:maven-jar-plugin from 3.5.0 to 3.5.1 across all three modules (srcmorph, srcmorph-cli, srcmorph-maven-plugin).
  • Update GitHub Actions scorecard workflow from v2.4.3 to v2.4.4.
  • Update CLAUDE.md to reflect the new logback-classic version.

Test plan

  • Affected unit / integration tests pass locally
  • CI is green on this branch
  • Docs / CHANGELOG updated where applicable

Related issues / PRs

Checklist

  • I have read CONTRIBUTING.md and CODE_OF_CONDUCT.md
  • My commits follow Conventional Commits
  • No security-sensitive changes (if there are, I have notified the maintainer privately per SECURITY.md)

https://claude.ai/code/session_011AbombALVWxqqmYB7mF1kD

…0→3.5.1, scorecard-action v2.4.3→v2.4.4

Match the dependency/action versions already adopted in bitcoinaddressfinder:
- logback-classic 1.5.38 -> 1.6.0 (parent dependencyManagement pin; comment
  clarified that the managed version wins over the llama transitive for
  enforcer DependencyConvergence) + CLAUDE.md dependency table
- maven-jar-plugin 3.5.0 -> 3.5.1 in all three module poms (srcmorph,
  srcmorph-cli, srcmorph-maven-plugin)
- ossf/scorecard-action v2.4.3 -> v2.4.4

Co-Authored-By: Claude Opus 4.8 <noreply@anthropic.com>
Claude-Session: https://claude.ai/code/session_011AbombALVWxqqmYB7mF1kD
@bernardladenthin
bernardladenthin merged commit d6d5fe6 into main Jul 24, 2026
2 checks passed
@bernardladenthin
bernardladenthin deleted the claude/baf-audit-repos-b6hldq branch July 24, 2026 16:25
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants