⬆️ Bump org.slf4j:slf4j-bom from 2.0.17 to 2.0.18

[dependabot]

Bumps org.slf4j:slf4j-bom from 2.0.17 to 2.0.18.

Release notes

Sourced from org.slf4j:slf4j-bom's releases.

SLF4J 2.0.18

2026-05-12 - Release of SLF4J 2.0.18

• In the logViaLocationAwareLoggerAPI() method of slf4j-api/DefaultLoggingEventBuilder the first marker from the markerList is now passed to locationAwareLogger.log() instead of null.

• The renderLevel() method in slf4j-simple/SimpleLogger now uses CONFIG_PARAMS.warnLevelString for WARN instead of hardcoded "WARN". This issue was reported in issues/471.

• A bit-wise identical binary of this version can be reproduced by building from source code at commit 58b66c2c7e840f525c07db4509534ea53ef95b82 associated with the tag v_2.0.18. Release built using Java "21" 2023-10-17 LTS build 21.0.1.+12-LTS-29 under Linux Debian 11.6.

Commits

• 58b66c2 update central-publishing-maven-plugin
• be4841c prepare release 2.0.18
• d2073be minor refactoring, javadoc changes
• 32a9854 add a trivial test for CONFIG_PARAMS.warnLevelString
• 77936c6 CONFIG_PARAMS.warnLevelString should be taken into account
• 34c9d30 extract first marker when caller locationAwareLogger
• 902b463 remove cruft
• b3c2f16 security manager is no longer supported in later JDKs
• 9468c7a remove unneccessary and unused files
• 183aaa5 start work on 2.0.18-SNAPSHOT
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)