From 72d617012b1248205629a686c3e9d9e730b595db Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Nov 2023 01:22:44 +0000
Subject: [PATCH 1/3] Bump slf4j.version from 2.0.7 to 2.0.9

Bumps `slf4j.version` from 2.0.7 to 2.0.9.

Updates `org.slf4j:slf4j-api` from 2.0.7 to 2.0.9

Updates `org.slf4j:slf4j-simple` from 2.0.7 to 2.0.9

---
updated-dependencies:
- dependency-name: org.slf4j:slf4j-api
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: org.slf4j:slf4j-simple
  dependency-type: direct:development
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 4918f2d3b1..13451500b9 100644
--- a/pom.xml
+++ b/pom.xml
@@ -113,7 +113,7 @@
         <jackson.version>2.15.3</jackson.version>
         <log4j2.version>2.20.0</log4j2.version>
         <ognl.version>3.3.4</ognl.version>
-        <slf4j.version>2.0.7</slf4j.version>
+        <slf4j.version>2.0.9</slf4j.version>
         <spring.platformVersion>5.3.27</spring.platformVersion>
         <tiles.version>3.0.8</tiles.version>
         <tiles-request.version>1.0.7</tiles-request.version>

From 601fb0ff5cc32e9fdfac054c73ccd7379a1f56ab Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Mon, 6 Nov 2023 01:22:54 +0000
Subject: [PATCH 2/3] Bump net.sf.jasperreports:jasperreports from 6.20.5 to
 6.20.6

Bumps [net.sf.jasperreports:jasperreports](https://github.com/TIBCOSoftware/jasperreports) from 6.20.5 to 6.20.6.
- [Release notes](https://github.com/TIBCOSoftware/jasperreports/releases)
- [Commits](https://github.com/TIBCOSoftware/jasperreports/compare/6.20.5...6.20.6)

---
updated-dependencies:
- dependency-name: net.sf.jasperreports:jasperreports
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 plugins/jasperreports/pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/plugins/jasperreports/pom.xml b/plugins/jasperreports/pom.xml
index 65bfee23d0..a81eef6171 100644
--- a/plugins/jasperreports/pom.xml
+++ b/plugins/jasperreports/pom.xml
@@ -35,7 +35,7 @@
         <dependency>
             <groupId>net.sf.jasperreports</groupId>
             <artifactId>jasperreports</artifactId>
-            <version>6.20.5</version>
+            <version>6.20.6</version>
             <scope>provided</scope>
             <exclusions>
                 <!-- not necessary to compile and it force dependency convergence issues -->

From e3241388dc05ddb33bdecd1154c247433dcc6a05 Mon Sep 17 00:00:00 2001
From: Kusal Kithul-Godage <git@kusal.io>
Date: Sun, 12 Nov 2023 19:49:40 +1100
Subject: [PATCH 3/3] WW-5350 Fix mismatched logging

---
 .../com/opensymphony/xwork2/ognl/SecurityMemberAccess.java    | 4 ++--
 1 file changed, 2 insertions(+), 2 deletions(-)

diff --git a/core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java b/core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
index e993f3adb1..966c0522a2 100644
--- a/core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
+++ b/core/src/main/java/com/opensymphony/xwork2/ognl/SecurityMemberAccess.java
@@ -166,7 +166,7 @@ protected boolean checkExclusionList(Object target, Member member) {
             return false;
         }
         if (isPackageExcluded(memberClass)) {
-            LOG.warn("Package [{}] of target class [{}] of target [{}] is excluded!",
+            LOG.warn("Package [{}] of member class [{}] of member [{}] is excluded!",
                     memberClass.getPackage(),
                     memberClass,
                     target);
@@ -181,7 +181,7 @@ protected boolean checkExclusionList(Object target, Member member) {
             return false;
         }
         if (isPackageExcluded(targetClass)) {
-            LOG.warn("Package [{}] of member [{}] are excluded!", targetClass.getPackage(), member);
+            LOG.warn("Package [{}] of target [{}] is excluded!", targetClass.getPackage(), member);
             return false;
         }
         return true;