From 490c0953d706cc0e6d4b7f8b368fb12cb2de9456 Mon Sep 17 00:00:00 2001
From: "gu-scala-steward-public-repos[bot]"
 <108136057+gu-scala-steward-public-repos[bot]@users.noreply.github.com>
Date: Fri, 21 Aug 2026 13:14:33 +0000
Subject: [PATCH] Update logback-classic to 1.6.3

---
 build.sbt | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/build.sbt b/build.sbt
index ecd2a936..db904140 100644
--- a/build.sbt
+++ b/build.sbt
@@ -63,7 +63,7 @@ lazy val root = (project in file("."))
         "jackson-databind"
       ),
       // Transient dependency of Play. No newer version of Play 3.0.9 with this vulnerability fixed.
-      "ch.qos.logback" % "logback-classic" % "1.6.1",
+      "ch.qos.logback" % "logback-classic" % "1.6.3",
       "com.fasterxml.jackson.module" %% "jackson-module-scala" % "2.22.1"
     ),
     scalacOptions ++= List(