Update palantir-java-format to 2.100.0 and logback to 1.6.5

[bernardladenthin]

Summary

• palantir-java-format 2.100.0 in all three module poms, and logback 1.6.5 in the parent's dependencyManagement (test scope only), matching the sibling repos.
• CLAUDE.md dependency table updated.

Test plan

• CI is green on this branch
• Docs updated (CLAUDE.md)

Related issues / PRs

Part of the 2026-10-01 cross-repo dependency sweep (java-llama.cpp, BitcoinAddressFinder, streambuffer, BroomCabinet, workspace).

Checklist

• No security-sensitive changes

🤖 Generated with Claude Code

https://claude.ai/code/session_01AytmJF9faEiQEVt6eetQS2

---

Generated by Claude Code

[claude]

Review Summary ✅

This is a well-executed dependency update PR. All changes are consistent and properly documented.

Observations

✅ Version Updates

• Logback 1.6.5 (patch security update) in parent dependencyManagement — correctly scoped to test scope only, respecting the Java 8 bytecode floor constraint
• Palantir-java-format 2.100.0 applied consistently across all three module pom files (srcmorph, srcmorph-cli, srcmorph-maven-plugin)

✅ Documentation

• CLAUDE.md dependency table updated to reflect logback 1.6.5 — no drift between code and docs

✅ Consistency

• No module was missed; all changes are symmetric and aligned
• Part of coordinated cross-repo update (matching sibling repos as noted in PR description)

✅ Security

• Logback patch version is a security/maintenance release
• Palantir-java-format (a code formatter) has minimal security surface
• PR author correctly marked as no security-sensitive changes

Conclusion

Ready to merge once CI passes. Clean, consistent, low-risk dependency update.