Bump ch.qos.logback:logback-core from 1.5.13 to 1.5.15 #2254

	#
	# Licensed to the Apache Software Foundation (ASF) under one or more
	# contributor license agreements. See the NOTICE file distributed with
	# this work for additional information regarding copyright ownership.
	# The ASF licenses this file to you under the Apache License, Version 2.0
	# (the "License"); you may not use this file except in compliance with
	# the License. You may obtain a copy of the License at
	#
	# http://www.apache.org/licenses/LICENSE-2.0
	#
	# Unless required by applicable law or agreed to in writing, software
	# distributed under the License is distributed on an "AS IS" BASIS,
	# WITHOUT WARRANTIES OR CONDITIONS OF ANY KIND, either express or implied.
	# See the License for the specific language governing permissions and
	# limitations under the License.
	#

	name: merge-dependabot

	on:
	pull_request_target:
	paths-ignore:
	- "**.adoc"
	- "**.md"
	- "**.txt"

	permissions: read-all

	jobs:

	build:
	if: github.repository == 'apache/logging-log4j2' && github.event_name == 'pull_request_target' && github.actor == 'dependabot[bot]'
	uses: apache/logging-parent/.github/workflows/build-reusable.yaml@rel/11.3.0
	secrets:
	DV_ACCESS_TOKEN: ${{ secrets.GE_ACCESS_TOKEN }}
	with:
	develocity-enabled: true
	reproducibility-check-enabled: false

	merge-dependabot:
	needs: build
	uses: apache/logging-parent/.github/workflows/merge-dependabot-reusable.yaml@rel/11.3.0
	permissions:
	contents: write # to push changelog commits
	pull-requests: write # to close the PR
	secrets:
	GPG_SECRET_KEY: ${{ secrets.LOGGING_GPG_SECRET_KEY }} # to sign commits

Provide feedback