From ecbed044b61bfd4b8913ed73f6bb61c301779b63 Mon Sep 17 00:00:00 2001
From: Greg Rushton <grushton@broadinstitute.org>
Date: Fri, 8 Dec 2023 11:30:04 -0500
Subject: [PATCH] update logback and dropwizard

---
 pom.xml | 22 +++++++++++++++++++++-
 1 file changed, 21 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index bb3dd4d114..50186d373d 100644
--- a/pom.xml
+++ b/pom.xml
@@ -14,7 +14,8 @@
     <maven.compiler.source>17</maven.compiler.source>
     <maven.compiler.target>17</maven.compiler.target>
     <liquibase.version>4.25.0</liquibase.version>
-    <dropwizard.version>4.0.2</dropwizard.version>
+    <dropwizard.version>4.0.4</dropwizard.version>
+    <logback.version>1.4.14</logback.version>
     <pact.version>4.6.3</pact.version>
     <postgres.version>42.7.0</postgres.version>
     <surefire.version>3.2.2</surefire.version>
@@ -517,6 +518,25 @@
       <version>${dropwizard.version}</version>
     </dependency>
 
+    <!-- Security update. See https://broadworkbench.atlassian.net/browse/DUOS-2826 -->
+    <dependency>
+        <groupId>ch.qos.logback</groupId>
+        <artifactId>logback-access</artifactId>
+        <version>${logback.version}</version>
+    </dependency>
+    <!-- Security update. See https://broadworkbench.atlassian.net/browse/DUOS-2826 -->
+    <dependency>
+        <groupId>ch.qos.logback</groupId>
+        <artifactId>logback-classic</artifactId>
+        <version>${logback.version}</version>
+    </dependency>
+    <!-- Security update. See https://broadworkbench.atlassian.net/browse/DUOS-2826 -->
+    <dependency>
+        <groupId>ch.qos.logback</groupId>
+        <artifactId>logback-core</artifactId>
+        <version>${logback.version}</version>
+    </dependency>
+
     <!--suppress VulnerableLibrariesLocal -->
     <dependency>
       <groupId>au.com.dius.pact</groupId>