upgrade slf4j-api and jul-to-slf4j to v2.0.17
What changed, and why it matters
This commit simply updates two logging helper libraries (SLF4J) from version 2.0.12 to 2.0.17. There is no indication in the commit itself that this fixes any security issue. It appears to be a routine dependency maintenance change.
No immediate action required. Treat as routine dependency hygiene. If security relevance is suspected, review the SLF4J 2.0.13 through 2.0.17 release notes for any security advisories.
Security signals we found
No strong security signals were identified.
Evidence from the diff
The diff bumps org.slf4j:slf4j-api and org.slf4j:jul-to-slf4j from 2.0.12 to 2.0.17 in build.gradle. No code changes are present, and the commit message does not mention any security fix, CVE, or vulnerability. Without external references, this is indistinguishable from a standard patch-version upgrade.
Changed components
build.gradle dependency versionsorg.slf4j:slf4j-apiorg.slf4j:jul-to-slf4jInspect captured patch +4 / −4
diff --git a/build.gradle b/build.gradle
index 387ffee..5b750a5 100644
--- a/build.gradle
+++ b/build.gradle
@@ -93,8 +93,8 @@ dependencies {
}
implementation('dev.bwt:bwt-jni:0.1.8')
implementation('net.sourceforge.javacsv:javacsv:2.0')
- implementation ('org.slf4j:slf4j-api:2.0.12')
- implementation('org.slf4j:jul-to-slf4j:2.0.12') {
+ implementation ('org.slf4j:slf4j-api:2.0.17')
+ implementation('org.slf4j:jul-to-slf4j:2.0.17') {
exclude group: 'org.slf4j'
}
implementation('com.sparrowwallet.bokmakierie:bokmakierie:1.0')
Why this scored 15/100
Community notes
Notes can correct, qualify, or add evidence to the AI analysis. Every note shown here has been validated by a human moderator.
The AI analysis stands alone for now. Submit a note if you can add evidence or important context.