From 27c322c7fcfca6be5beb182becfe408e700d011b Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 6 Jul 2026 01:02:50 +0000 Subject: [PATCH 1/2] fix(deps): bump org.slf4j:slf4j-api from 1.7.26 to 2.0.18 Bumps org.slf4j:slf4j-api from 1.7.26 to 2.0.18. --- updated-dependencies: - dependency-name: org.slf4j:slf4j-api dependency-version: 2.0.18 dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- amber/build.sbt | 2 +- build.sbt | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/amber/build.sbt b/amber/build.sbt index 64b137357ed..1257d94a046 100644 --- a/amber/build.sbt +++ b/amber/build.sbt @@ -131,7 +131,7 @@ val jacksonVersion = "2.18.8" val mbknorJacksonJsonSchemaDependencies = Seq( "com.fasterxml.jackson.core" % "jackson-databind" % jacksonVersion, "javax.validation" % "validation-api" % "2.0.1.Final", - "org.slf4j" % "slf4j-api" % "1.7.26", + "org.slf4j" % "slf4j-api" % "2.0.18", "io.github.classgraph" % "classgraph" % "4.8.157", "ch.qos.logback" % "logback-classic" % "1.2.13" % "test", "com.github.java-json-tools" % "json-schema-validator" % "2.2.14" % "test", diff --git a/build.sbt b/build.sbt index 44e177b6dcd..f060493eb83 100644 --- a/build.sbt +++ b/build.sbt @@ -169,7 +169,7 @@ lazy val WorkflowExecutionService = (project in file("amber")) "com.fasterxml.jackson.core" % "jackson-core" % jacksonVersion, "com.fasterxml.jackson.core" % "jackson-databind" % jacksonVersion, "com.fasterxml.jackson.module" %% "jackson-module-scala" % jacksonVersion, - "org.slf4j" % "slf4j-api" % "1.7.26", + "org.slf4j" % "slf4j-api" % "2.0.18", "org.eclipse.jetty" % "jetty-server" % "9.4.20.v20190813", "org.eclipse.jetty" % "jetty-servlet" % "9.4.20.v20190813", "org.eclipse.jetty" % "jetty-http" % "9.4.20.v20190813", From 4e1a9b83b9950c168470a99856514c15133acb64 Mon Sep 17 00:00:00 2001 From: Xinyuan Lin Date: Sun, 5 Jul 2026 18:06:20 -0700 Subject: [PATCH 2/2] chore(licensing): claim slf4j-api 2.0.18 in amber/LICENSE-binary-java The slf4j-api 1.7.26 -> 2.0.18 bump makes the amber dist bundle slf4j-api-2.0.18.jar, but amber/LICENSE-binary-java still claimed 1.7.26, failing `build / amber` on the direct-dep LICENSE-binary drift check: DRIFT (direct) ~ org.slf4j.slf4j-api: LICENSE-binary=1.7.26 bundled=2.0.18 Sync the claim to slf4j-api-2.0.18.jar. --- amber/LICENSE-binary-java | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/amber/LICENSE-binary-java b/amber/LICENSE-binary-java index ee000c544d6..28448b65fc8 100644 --- a/amber/LICENSE-binary-java +++ b/amber/LICENSE-binary-java @@ -581,7 +581,7 @@ Scala/Java jars: - org.reactivestreams.reactive-streams-1.0.4.jar - org.slf4j.jcl-over-slf4j-1.7.26.jar - org.slf4j.jul-to-slf4j-1.7.26.jar - - org.slf4j.slf4j-api-1.7.26.jar + - org.slf4j.slf4j-api-2.0.18.jar - org.typelevel.cats-core_2.13-2.11.0.jar - org.typelevel.cats-kernel_2.13-2.11.0.jar - org.typelevel.fs2-grpc-runtime_2.13-2.11.0.jar