From a2a9aad0aca0bc1b9cf2119c2ff20e46aeb42991 Mon Sep 17 00:00:00 2001
From: snyk-bot <snyk-bot@snyk.io>
Date: Fri, 30 Jan 2026 06:38:36 +0000
Subject: [PATCH] fix: core-groovy-2/pom.xml & pom.xml to reduce
 vulnerabilities

The following vulnerabilities are fixed with an upgrade:
- https://snyk.io/vuln/SNYK-JAVA-CHQOSLOGBACK-15062482
---
 core-groovy-2/pom.xml | 2 +-
 pom.xml               | 6 +++---
 2 files changed, 4 insertions(+), 4 deletions(-)

diff --git a/core-groovy-2/pom.xml b/core-groovy-2/pom.xml
index ba3fd0802b94..6fc4a49e8646 100644
--- a/core-groovy-2/pom.xml
+++ b/core-groovy-2/pom.xml
@@ -176,7 +176,7 @@
         <hsqldb.version>2.4.0</hsqldb.version>
         <spock-core.version>1.1-groovy-2.4</spock-core.version>
         <maven-compiler-plugin.version>3.8.1</maven-compiler-plugin.version>
-        <logback.version>1.2.3</logback.version>
+        <logback.version>1.5.25</logback.version>
         <groovy.version>2.5.7</groovy.version>
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
     </properties>
diff --git a/pom.xml b/pom.xml
index 5b5058763dc9..96f6cc2c903f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -268,7 +268,7 @@
 										</goals>
 									</pluginExecutionFilter>
 									<action>
-										<ignore></ignore>
+										<ignore/>
 									</action>
 								</pluginExecution>
 								<pluginExecution>
@@ -287,7 +287,7 @@
 										</goals>
 									</pluginExecutionFilter>
 									<action>
-										<ignore></ignore>
+										<ignore/>
 									</action>
 								</pluginExecution>
 							</pluginExecutions>
@@ -1549,7 +1549,7 @@
 
 		<!-- logging -->
 		<org.slf4j.version>1.7.21</org.slf4j.version>
-		<logback.version>1.1.7</logback.version>
+		<logback.version>1.5.25</logback.version>
 
 		<!-- plugins -->
 		<!-- can't upgrade the plugin yet; as there is an issue with 2.22 no longer running all the tests-->