Skip to content

chore(deps): bump slf4j from 1.7.30 to 2.0.20 - #6536

Open
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/slf4j-2.0.20
Open

dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/gradle/slf4j-2.0.20

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 10, 2026 •

Copy link
Copy Markdown
Contributor

Bumps slf4j from 1.7.30 to 2.0.20.
Updates org.slf4j:slf4j-api from 1.7.30 to 2.0.20

Updates org.slf4j:slf4j-jdk14 from 1.7.30 to 2.0.20

@dependabot
dependabot Bot requested review from a team and adinauer as code owners November 10, 2026 09:17
@dependabot dependabot Bot added the dependencies Pull requests that update a dependency file label Nov 10, 2026
@dependabot
dependabot Bot requested review from 0xadam-brown and runningcode and removed request for a team November 10, 2026 09:17
@dependabot dependabot Bot added the Java SDK label Nov 10, 2026
@sentry

sentry Bot commented Nov 10, 2026 •

Copy link
Copy Markdown

📲 Install Builds

Android

🔗 App Name App ID Version Configuration
SDK Size io.sentry.tests.size 8.63.0 (1) release

⚙️ sentry-android Build Distribution Settings

@cursor cursor Bot left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Cursor Bugbot has reviewed your changes and found 1 potential issue.

Fix All in Cursor

❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.

Reviewed by Cursor Bugbot for commit 9df0e00. Configure here.

Comment thread gradle/libs.versions.toml
sqlite = "2.6.2"
sqliteRc = "2.8.0-alpha03" # Required by Room3 3.0.0-rc*
slf4j = "1.7.30"
slf4j = "2.0.20"

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

SLF4J 2.x bump breaks 1.x matrix

High Severity

The slf4j catalog pin is the 1.x line used by Java 8 and Spring Boot 2 modules, kept separate from slf4j2-api. Jumping it to 2.0.20 is a major bump incompatible with logback 1.2.9. SLF4J 2.x ignores 1.7 StaticLoggerBinder bindings, so sentry-jul MDC tests run against a NOP adapter and fail, and sentry-spring compiles against 2.x while Boot 2 still ships 1.7.

Fix in Cursor Fix in Web

Triggered by project rule: PR Review Guidelines for Cursor Bugbot

Reviewed by Cursor Bugbot for commit 9df0e00. Configure here.

Bumps `slf4j` from 1.7.30 to 2.0.20.

Updates `org.slf4j:slf4j-api` from 1.7.30 to 2.0.20

Updates `org.slf4j:slf4j-jdk14` from 1.7.30 to 2.0.20

---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.slf4j:slf4j-jdk14
  dependency-version: 2.0.20
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/slf4j-2.0.20 branch from 9df0e00 to fa272ee Compare November 11, 2026 14:01

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file Java SDK

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants