Merge f70fcd9 into 1.0.6

.github/dependabot.yml

@@ -14,6 +14,8 @@ updates:
   # Don't update Reactor projects
   - dependency-name: io.projectreactor:*
   - dependency-name: io.projectreactor.addons:*
+  # JSR305 backport is fixed to last version with annotations (3.0.1)
+  - dependency-name: "com.google.code.findbugs:jsr305"
   # Versions > 6.13 require JDK11+
   - dependency-name: com.diffplug.spotless
     versions:
@@ -29,6 +31,13 @@ updates:
   - dependency-name: org.slf4j:*
     versions:
     - "[2.a, 3]"
+  - dependency-name: ch.qos.logback:logback-classic
+    versions:
+    - "[1.3.a, 1.6]"
+  # artifactory: don't upgrade to v5
+  - dependency-name: "com.jfrog.artifactory"
+    versions:
+    - ">= 5.0.a"
   rebase-strategy: disabled
 - package-ecosystem: github-actions
   directory: "/"