update logback to non vulnerable version, drop Java 8 support (#486)

* Remove Java 8 from CI workflow matrix

* Update Java version requirement in README

* Update Logback version in README

* Update Dependencies.scala

Author: jxnu-liguobin

.github/workflows/ci.yml

@@ -9,7 +9,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        java: [ 8, 11, 17, 21 ]
+        java: [ 11, 17, 21 ]
         scala: [ 2.11.x, 2.12.x, 2.13.x, 3.x ]
     runs-on: ubuntu-latest
     steps:
@@ -31,7 +31,7 @@ jobs:
     strategy:
       fail-fast: false
       matrix:
-        java: [ 8, 11, 17, 21 ]
+        java: [ 11, 17, 21 ]
         scala: [ 2.13.x, 3.x ]
     runs-on: ubuntu-latest
     steps:

README.md

@@ -14,19 +14,20 @@ if (logger.isDebugEnabled) logger.debug(s"Some $expensive message!")
 
 ## Prerequisites
 
-* Java 8 or higher
+* Java 11 or higher
+  * Scala Logging 3.x supports Java 8
 * Scala 2.11, 2.12, 2.13 or 3.0
 * Logging backend compatible with SLF4J
 
 A compatible logging backend is [Logback](http://logback.qos.ch), add it to your sbt build definition:
 
 ```scala
-libraryDependencies += "ch.qos.logback" % "logback-classic" % "1.5.21"
+libraryDependencies += "ch.qos.logback" % "logback-classic" % "1.4.14"
 ```
 
 If you are looking for a version compatible with Scala 2.10, check out Scala Logging 2.x.
 
-If you are looking for a version compatible with SLF4J 1.x, check out Scala Logging 3.x.
+**If you are looking for a version compatible with SLF4J 1.x, check out Scala Logging 3.x.**
 
 
 ## Getting Scala Logging

project/Dependencies.scala

@@ -1,7 +1,7 @@
 import sbt._
 
 object Version {
-  val logback   = "1.2.12"
+  val logback   = "1.4.14"
   val mockito   = "3.2.10.0"
   val scalaTest = "3.2.19"
   val slf4j     = "2.0.17"