7 hours ago
logback

Logback 1.6.4

2026-09-24 Release of logback version 1.6.4

• Variable substitution is again applied to the scan attribute of the <configuration> element. The scanning refactoring in version 1.5.27 had dropped substitution, so values such as ${logback.scan.enabled:-true} were no longer resolved. As before version 1.5.27, an unrecognized non-empty value turns scanning on. The same substitution now applies to the scan attribute of <propertiesConfigurator>. This regression was reported in issues/1065 by vaibhavjain2.

• OutputStreamAppender and FileAppender now handle stateful encoders. The Encoder interface has a new default method called isStateful(), which returns false. An encoder that keeps state between calls to encode() can return true. For such encoders, the appender holds its write lock while encoding and while writing, so the output of concurrent appends cannot interleave. Stateless encoders still encode outside the lock, so their performance does not change. Existing encoders need no changes.

• Several race conditions in OutputStreamAppender and FileAppender were fixed. The appender is now marked started and the encoder header is written while the same lock is held, so a concurrent append can no longer write an event before the header. After acquiring the lock, the appender checks again whether it has been stopped, so no event is written after the footer. In prudent mode, FileAppender now encodes and writes each event while holding the lock.

• Fixed a data race on the logger count in LoggerContext. Loggers are created under the lock of their parent logger, so loggers with different parents could be created at the same time and increments of the shared counter could be lost. As a result, LoggerContext.size() could return a value lower than the actual number of loggers. The counter is now an AtomicInteger. This issue was reported in issues/1038 by hcantunc. The fix was contributed in PR #1055 by seonwoo_jung.

• TimeBasedRollingPolicy now supports half-day periods. Date patterns with the AM/PM marker, for example %d{yyyy-MM-dd-a}, used to be detected as daily and rolled over only at midnight. They now roll over at both 00:00 and 12:00. This issue was reported in issues/976 by shakthifuture. The fix was contributed in PR #1051 by seonwoo_jung. See TimeBasedRollingPolicy.

• If org.jline.jansi.AnsiConsole cannot be found on the class path, JansiConsoleAppender now emits warnings that explain how to add org.jline:jansi-core and then writes to the plain console stream. See codes.html#missingJlineJansi.

• The unused ch.qos.logback.classic.util.LogbackMDCAdapterSimple class was removed. LogbackMDCAdapter remains the default MDC adapter.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 07d291ca0d280bc5da934ec9ff5f1da634fd7937 associated with the tag v_1.6.4. The release was built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Full Changelog: https://github.com/qos-ch/logback/compare/v_1.6.3...v_1.6.4

12 hours ago
lettuce

7.8.0.RELEASE

The Lettuce team is pleased to announce the Lettuce 7.8.0 minor release!

Lettuce 7.8.0 supports Redis 2.6+ up to Redis 8.x. In terms of Java runtime, Lettuce requires at least Java 8 and works with Java 24. The driver is tested against Redis 8.10, Redis 8.8, Redis 8.6, Redis 8.4, Redis 8.2, Redis 8.0, Redis 7.4 and Redis 7.2.

Thanks to all contributors who made Lettuce 7.8.0.RELEASE possible.

📗 Links Reference documentation: https://lettuce.io/core/7.8.0.RELEASE

⭐ New Features

🐞 Bug Fixes

⚙️ Maintenance

💡 Other

❤️ New Contributors - Welcome to the Lettuce family!

Full Changelog: https://github.com/redis/lettuce/compare/7.7.0.RELEASE...7.8.0.RELEASE

12 hours ago
lettuce-core

7.8.0.RELEASE

The Lettuce team is pleased to announce the Lettuce 7.8.0 minor release!

Lettuce 7.8.0 supports Redis 2.6+ up to Redis 8.x. In terms of Java runtime, Lettuce requires at least Java 8 and works with Java 24. The driver is tested against Redis 8.10, Redis 8.8, Redis 8.6, Redis 8.4, Redis 8.2, Redis 8.0, Redis 7.4 and Redis 7.2.

Thanks to all contributors who made Lettuce 7.8.0.RELEASE possible.

📗 Links Reference documentation: https://lettuce.io/core/7.8.0.RELEASE

⭐ New Features

🐞 Bug Fixes

⚙️ Maintenance

💡 Other

❤️ New Contributors - Welcome to the Lettuce family!

Full Changelog: https://github.com/redis/lettuce/compare/7.7.0.RELEASE...7.8.0.RELEASE

13 hours ago
selenium

Nightly

Commits

  • acd7ce8: [rb] remove stale Windows pending guard from Firefox signed directory addon test (Titus Fortner)
  • 587731e: [rust] fix flaky tests (#18073) (Titus Fortner) #18073
  • cecd644: [build] Automated Selenium Manager Update (Selenium CI Bot)
  • 2b06948: [js] Align BiDi Generator with the low-level contract (#17973) (Puja Jagani) #17973
16 hours ago
spring-security

7.2.0-M2

⭐ New Features

  • @EnableMethodSecurity should pick up PermissionEvaluator bean
  • Allow configurable DPoP Proof verifier
  • Expose OAuth2AuthorizationCodeRequestValidatingFilter
  • Ignore Apple touch icon requests (apple-touch-icon*.png) in the default RequestCache
  • Ignore browserconfig.xml requests in the default RequestCache
  • Ignore Chrome DevTools' .well-known/appspecific/com.chrome.devtools.json probe in the default RequestCache
  • Ignore web app manifest requests (manifest.json / manifest.webmanifest) in the default RequestCache
  • KerberosRestClient should rethrow original RestClientException
  • Make authenticationSuccessHandler Configurable in Resource Server DSL
  • Modernize the default RequestCache background-request ignore list
  • Modernize the default RequestCache background-request ignore list
  • Simplify ProviderManager null provider check
  • Test cache full rejection and replay detection
  • Update cryptography.adoc to use include-code

🪲 Bug Fixes

  • Downgrade to Jackson 3.1
  • Header Writers should not corrupt Jetty HttpFields state in reactive ResponseBodyEmitter handlers
  • NoClassDefFound with version 7.1.0
  • TokenType reference comparison is used in BearerTokenAuthentication

🔨 Dependency Upgrades

  • Bump actions/setup-java from 6.0.0 to 6.0.1
  • Bump antora from 3.2.0-rc.2 to 3.2.0
  • Bump antora from 3.2.0-rc.3 to 3.2.0 in /docs
  • Bump gradle-wrapper from 9.7.0 to 9.7.1
  • Bump io-spring-javaformat from 0.0.47 to 0.0.48
  • Bump io.spring.develocity.conventions from 0.0.25 to 0.0.26
  • Bump io.spring.gradle:spring-security-release-plugin from 1.0.18 to 1.0.19
  • Bump org-bouncycastle from 1.85 to 1.86
  • Bump org-jetbrains-kotlin from 2.4.10 to 2.4.20
  • Bump org.hibernate.orm:hibernate-core from 7.4.5.Final to 7.4.7.Final
  • Bump org.hibernate.orm:hibernate-core from 7.4.7.Final to 7.4.8.Final
  • Bump org.hibernate.orm:hibernate-core from 7.4.8.Final to 7.4.9.Final
  • Bump org.hibernate.orm:hibernate-core from 7.4.9.Final to 7.4.10.Final
  • Bump org.seleniumhq.selenium:htmlunit3-driver from 4.43.0 to 4.47.0
  • Bump org.seleniumhq.selenium:selenium-java from 4.43.0 to 4.47.0
  • Bump org.seleniumhq.selenium:selenium-java from 4.43.0 to 4.48.0
  • Bump org.seleniumhq.selenium:selenium-java from 4.48.0 to 4.49.0
  • Bump spring-io/spring-release-actions/compute-version from 0.0.6 to 0.0.7
  • Bump spring-io/spring-release-actions/get-todays-release-version from 0.0.6 to 0.0.7
  • Bump tools.jackson:jackson-bom from 3.1.6 to 3.2.2
  • Update to HtmlUnit 5
  • Update to Micrometer 1.18.0-M2
  • Update to Node 24
  • Update to Reactor 2026.0.0-M2
  • Update to Spring Data 2026.1.0-M2
  • Update to Spring Framework 7.1.0-M2
  • Update to Spring LDAP 4.2.0-M1
  • Update to spring-security-release-tools v1.0.18

🔩 Build Updates

  • Bump io-micrometer from 1.18.0-M1 to 1.18.0-SNAPSHOT
  • Configure for Reproducible Builds
  • Turn Off Auto-merge for Maintenance Branch

❤️ Contributors

Thank you to all the contributors who worked on this release:

@Siggen, @anthonydahanne, @avsan, @iain-henderson, @morokosi, @rwinch, and @sunghyun1999