bump logback for cve CVE-2024-12798 (#107)

yetanalytics · Jan 2, 2025 · ab1d462 · ab1d462
1 parent 71307bf
commit ab1d462
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/deps.edn b/deps.edn
@@ -23,7 +23,7 @@
  {:cli {:extra-paths ["src/cli"]
         :extra-deps {org.clojure/tools.cli {:mvn/version "1.0.206"}
                      ch.qos.logback/logback-classic
-                     {:mvn/version "1.3.14"
+                     {:mvn/version "1.5.15"
                       :exclusions [org.slf4j/slf4j-api]}
                      org.slf4j/slf4j-api {:mvn/version "2.0.12"}
                      org.slf4j/jul-to-slf4j {:mvn/version "2.0.12"}
@@ -42,7 +42,7 @@
           com.yetanalytics/lrs {:mvn/version "1.2.11"}
           io.pedestal/pedestal.jetty {:mvn/version "0.5.9"}
           ;; Some integration tests use logback
-          ch.qos.logback/logback-classic {:mvn/version "1.3.14"
+          ch.qos.logback/logback-classic {:mvn/version "1.5.15"
                                           :exclusions [org.slf4j/slf4j-api]}
           org.slf4j/slf4j-api {:mvn/version "2.0.12"}
           org.slf4j/jul-to-slf4j {:mvn/version "2.0.12"}