From 86a86384835ac16f39633bbc71f435a5b04f97e8 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 30 Oct 2026 14:54:05 +0000
Subject: [PATCH] build(deps): bump ch.qos.logback:logback-core from 1.6.3 to
 1.6.6

Bumps [ch.qos.logback:logback-core](https://github.com/qos-ch/logback) from 1.6.3 to 1.6.6.
- [Release notes](https://github.com/qos-ch/logback/releases)
- [Commits](https://github.com/qos-ch/logback/compare/v_1.6.3...v_1.6.6)

---
updated-dependencies:
- dependency-name: ch.qos.logback:logback-core
  dependency-version: 1.6.6
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 1177c6a..e975173 100644
--- a/pom.xml
+++ b/pom.xml
@@ -51,7 +51,7 @@
             <dependency>
                 <groupId>ch.qos.logback</groupId>
                 <artifactId>logback-core</artifactId>
-                <version>1.6.3</version>
+                <version>1.6.6</version>
             </dependency>
             <!-- CVE-2026-110879 : RCE par contournement de PolymorphicTypeValidator (fix incomplet de CVE-2026-54512) -
                  jackson-databind 2.x (tire par jjwt) est aussi concerne, pas seulement la ligne 3.x ci-dessus -->