[MNG-7441] 3.8.x Update version of logback

[cstamas]

This issue is fluke, as logback is actually optional
dependency, but still, to cut reports like these from
root, let's do this update.

---

https://issues.apache.org/jira/browse/MNG-7441

[bmarwell]

LGTM.

This is good because it will silence security scanners. While this dependency is optional, it might actually ship with Maven. It does not do so at the moment (slf4j-simple will ship with maven if I am not mistaken).
Anyway, +1 for the update.

[michael-o]

Nice waste of time for bogus as you have said ;-)

[cstamas]

Any idea why Jenkins failed this build? Since the change of ASF CI build Jenkins is really utterly unreliable.... 😞

[khmarbaise]

This seemed to be the reason:
[ERROR] Plugin org.apache.maven.plugins:maven-dependency-plugin:3.1.1 or one of its dependencies could not be resolved: Failed to read artifact descriptor for org.apache.maven.plugins:maven-dependency-plugin:jar:3.1.1: Could not transfer artifact org.apache.maven.plugins:maven-dependency-plugin:pom:3.1.1 from/to central (https://repo1.maven.org/maven2): transfer failed for https://repo1.maven.org/maven2/org/apache/maven/plugins/maven-dependency-plugin/3.1.1/maven-dependency-plugin-3.1.1.pom: Received fatal alert: protocol_version -> [Help 1]

[michael-o]

Java 7?

[khmarbaise]

Maven 3.8.X ist built also with JDK 7...

https://ci-maven.apache.org/job/Maven/job/maven-box/job/maven/job/maven-3.8.x/

[rmannibucau]

If it is only about LogbackConfiguration it can be done by reflection and the dep dropped, no?

[slawekjaranowski]

In maven-3.8.x build there is the same errors like:

Caused by: javax.net.ssl.SSLException: Received fatal alert: protocol_version

Root cause (probably), command line executed by verifier :

Exit code was non-zero: 1; command line and log = 
/home/jenkins/jenkins-home/workspace/aven_maven-box_maven_maven-3.8.x/test/core-it-suite/target/apache-maven/bin/mvn --global-settings /home/jenkins/jenkins-home/workspace/aven_maven-box_maven_maven-3.8.x/test/core-it-suite/target/test-classes/settings-remote.xml -e --batch-mode -Dmaven.repo.local=/home/jenkins/jenkins-home/workspace/aven_maven-box_maven_maven-3.8.x/test/it-local-repo install

there is missing property in command line -Dhttps.protocols=TLSv1.2

[jira-importer]

Resolve #9297