[Snyk] Fix for 1 vulnerabilities

[ayusuf-mq]

Snyk has created this PR to fix 1 vulnerabilities in the maven dependencies of this project.

Snyk changed the following file(s):

• samples/server/petstore/jaxrs/jersey2/pom.xml

Vulnerabilities that will be fixed with an upgrade:

	Issue	Score	Upgrade
	External Initialization of Trusted Variables or Data Stores SNYK-JAVA-CHQOSLOGBACK-15062482	290	ch.qos.logback:logback-classic: 1.2.0 -> 1.5.25 ch.qos.logback:logback-core: 1.2.0 -> 1.5.25 No Path Found No Known Exploit

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• Max score is 1000. Note that the real score may have changed since the PR was raised.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open fix PRs.

For more information:
🧐 View latest project report
📜 Customise PR templates
🛠 Adjust project settings
📚 Read about Snyk's upgrade logic

---

Learn how to fix vulnerabilities with free interactive lessons:

🦉 Learn about vulnerability in an interactive lesson of Snyk Learn.

[ayusuf-mq]

This major version upgrade from 1.2.0 to 1.5.25 introduces significant breaking changes, including required updates to the Java Development Kit (JDK) and SLF4J library, and changes to internal APIs.

Highlights:

• Java and SLF4J Version: Logback 1.4.x and higher require Java 11 (up from Java 8) and SLF4J 2.0.x (up from 1.7.x). This is a major dependency change that may require a broader update of the project's dependencies to avoid conflicts.
• Java EE to Jakarta EE: Optional components like SMTPAppender have been migrated from the javax.* namespace (Java EE) to the jakarta.* namespace (Jakarta EE) starting in version 1.4.x.
• Internal Configuration API (Joran): Logback's internal configuration system, Joran, was rewritten in version 1.3. Custom code that programmatically interacts with Joran will need to be adapted.

Source: Package documentation
Recommendation: Before upgrading, ensure the project is compatible with Java 11 and SLF4J 2.0.x. Verify all dependencies to prevent SLF4J version conflicts. Review any custom code that interacts with Logback's configuration system and check for usage of optional components that now depend on Jakarta EE.

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.

[ayusuf-mq]

This upgrade spans multiple releases (1.3.x, 1.4.x, 1.5.x) and introduces significant breaking changes requiring environment and code updates.

Highlights:

• Update Runtime & Dependencies: The target version 1.5.2

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.