From 1a6b7cdac7aaefbf086e74035eb24d16317e5ef4 Mon Sep 17 00:00:00 2001
From: lsiepel <leosiepel@gmail.com>
Date: Fri, 15 Aug 2025 15:17:00 +0200
Subject: [PATCH 1/2] Update dependabot.yml

---
 .github/dependabot.yml | 14 ++++++++++++++
 1 file changed, 14 insertions(+)

diff --git a/.github/dependabot.yml b/.github/dependabot.yml
index 827b8bc00c652..af9df56c96929 100644
--- a/.github/dependabot.yml
+++ b/.github/dependabot.yml
@@ -43,3 +43,17 @@ updates:
       - dependency-name: "*graalvm*" # do not touch graalvm related stuff
       - dependency-name: "org.openapitools:openapi*" # updated togeter with openapi generator
       - dependency-name: "org.apache.openjpa:openjpa*" # should be done with openjpa upgrades"
+
+  - package-ecosystem: "maven"
+    directory: "/bundles"
+    schedule:
+      interval: "weekly"
+    open-pull-requests-limit: 15
+    labels:
+      - dependencies
+    ignore:
+      - dependency-name: "com.github.jaxb-xew-plugin:jaxb-xew-plugin" # updated with core
+      - dependency-name: "com.diffplug.spotless:spotless-maven-plugin" # updated together with SAT
+      - dependency-name: "*graalvm*" # do not touch graalvm related stuff
+      - dependency-name: "org.openapitools:openapi*" # updated togeter with openapi generator
+      - dependency-name: "org.apache.openjpa:openjpa*" # should be done with openjpa upgrades"

From aa86f7b02d01d9a1f50070993389906091d5e1e0 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 15 Aug 2025 13:18:01 +0000
Subject: [PATCH 2/2] Bump org.slf4j:slf4j-api from 1.7.32 to 2.0.17 in
 /bundles

Bumps org.slf4j:slf4j-api from 1.7.32 to 2.0.17.

---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
  dependency-version: 2.0.17
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 bundles/org.openhab.binding.bambulab/pom.xml     | 2 +-
 bundles/org.openhab.persistence.dynamodb/pom.xml | 2 +-
 pom.xml                                          | 2 +-
 3 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/bundles/org.openhab.binding.bambulab/pom.xml b/bundles/org.openhab.binding.bambulab/pom.xml
index c8ae8bba9ebd4..5a198e5a0f778 100644
--- a/bundles/org.openhab.binding.bambulab/pom.xml
+++ b/bundles/org.openhab.binding.bambulab/pom.xml
@@ -33,7 +33,7 @@
     <dependency>
       <groupId>org.slf4j</groupId>
       <artifactId>slf4j-api</artifactId>
-      <version>2.0.16</version>
+      <version>2.0.17</version>
       <scope>provided</scope>
     </dependency>
 
diff --git a/bundles/org.openhab.persistence.dynamodb/pom.xml b/bundles/org.openhab.persistence.dynamodb/pom.xml
index 57a7ae0132ed1..4b3a0175981fc 100644
--- a/bundles/org.openhab.persistence.dynamodb/pom.xml
+++ b/bundles/org.openhab.persistence.dynamodb/pom.xml
@@ -22,7 +22,7 @@
       netty. Let's ensure by listing relevant packages with dep.noembedding -->
     <dep.noembedding>netty-common,netty-transport,netty-transport-native-epoll,netty-transport-native-unix-common,netty-buffer,netty-resolver,netty-codec,netty-codec-http,netty-codec-http2,netty-handler</dep.noembedding>
     <!-- slf4j version matching the version specified in openhab-core/pom.xml -->
-    <slf4j.version>1.7.32</slf4j.version>
+    <slf4j.version>2.0.17</slf4j.version>
     <jetty.version>9.4.57.v20241219</jetty.version>
   </properties>
 
diff --git a/pom.xml b/pom.xml
index 18453ac6ae4d0..59b452e9bc036 100644
--- a/pom.xml
+++ b/pom.xml
@@ -79,7 +79,7 @@
     <gson.version>2.11.0</gson.version>
     <kotlin.version>1.9.23</kotlin.version>
     <sat.version>0.17.0</sat.version>
-    <slf4j.version>2.0.12</slf4j.version>
+    <slf4j.version>2.0.17</slf4j.version>
     <spotless.version>2.44.3</spotless.version>
     <!-- Eclipse Java formatter version 4.26+ does not check test files -->
     <spotless.eclipse.version>4.25</spotless.eclipse.version>