Merge pull request #8943 from eclipse/fix/jetty-10.0.x/downgrade-logb…

…ack-1.3.x

Issue #8942 - Downgrading logback to 1.3.0

.github/dependabot.yml

@@ -43,6 +43,8 @@ updates:
         versions: [ ">=3.0.0" ]
       - dependency-name: "org.glassfish.jaxb:*"
         versions: [ ">=3.0.0"]
+      - dependency-name: "ch.qos.logback:*"
+        versions: [ ">=1.4.0"]
 
   - package-ecosystem: "maven"
     directory: "/"

pom.xml

@@ -101,7 +101,7 @@
     <junit.version>5.9.1</junit.version>
     <kerb-simplekdc.version>2.0.2</kerb-simplekdc.version>
     <log4j2.version>2.19.0</log4j2.version>
-    <logback.version>1.4.4</logback.version>
+    <logback.version>1.3.5</logback.version>
     <mariadb.version>3.0.8</mariadb.version>
     <mariadb.docker.version>10.3.6</mariadb.docker.version>
     <maven.resolver.version>1.8.2</maven.resolver.version>
@@ -114,7 +114,7 @@
     <org.osgi.util.promise.version>1.2.0</org.osgi.util.promise.version>
     <plexus-component-annotations.version>2.1.1</plexus-component-annotations.version>
     <plexus-utils.version>3.5.0</plexus-utils.version>
-    <slf4j.version>2.0.2</slf4j.version>
+    <slf4j.version>2.0.5</slf4j.version>
     <springboot.version>2.1.1.RELEASE</springboot.version>
     <taglibs-standard-impl.version>1.2.5</taglibs-standard-impl.version>
     <taglibs-standard-spec.version>1.2.5</taglibs-standard-spec.version>