Skip to content

chore(deps): update dependency sbt/sbt to v1.12.9#37

Open
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/sbt-sbt-1.x
Open

chore(deps): update dependency sbt/sbt to v1.12.9#37
renovate[bot] wants to merge 1 commit intomasterfrom
renovate/sbt-sbt-1.x

Conversation

@renovate
Copy link
Copy Markdown

@renovate renovate bot commented Sep 26, 2024

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Update Change
sbt/sbt minor 1.3.91.12.9

Release Notes

sbt/sbt (sbt/sbt)

v1.12.9

Compare Source

v1.12.8: 1.12.8

Compare Source

updates

behind the scenes

Full Changelog: sbt/sbt@v1.12.7...v1.12.8

v1.12.7: 1.12.7

Compare Source

updates

Full Changelog: sbt/sbt@v1.12.6...v1.12.7

v1.12.6: 1.12.6

Compare Source

updates

Full Changelog: sbt/sbt@v1.12.5...v1.12.6

v1.12.5: 1.12.5

Compare Source

updates

🐛 bug fixes

Full Changelog: sbt/sbt@v1.12.4...v1.12.5

v1.12.4: 1.12.4

Compare Source

  • backport: Respect scalaOrganization in compiler bridge resolution by @​tanishiking in #​8799
  • backport: Fixes .jvmopts parse error on Windows Git Bash by reverting "Handle JVM parameters with spaces in dot files" by @​eed3si9n in #​8798

Full Changelog: sbt/sbt@v1.12.3...v1.12.4

v1.12.3

Compare Source

v1.12.2: 1.12.2

Compare Source

updates

Full Changelog: sbt/sbt@v1.12.1...v1.12.2

v1.12.1: 1.12.1

Compare Source

bug fixes

behind the scenes

Full Changelog: sbt/sbt@v1.12.0...v1.12.1

v1.12.0: 1.12.0

Compare Source

changes with compatibility implications

  • dependencyTree displays internal config, which includes Provided by @​eed3si9n in #​8359
  • Scaladoc now requires Compile / doc / compilers scoped to doc task

🚀 updates

🐛 bug fixes

behind the scenes

new contributors

Full Changelog: sbt/sbt@v1.11.7...v1.12.0

v1.11.7: 1.11.7

Compare Source

🚀 updates

🐛 bug fixes

🎬 behind the scenes

Full Changelog: sbt/sbt@v1.11.6...v1.11.7

v1.11.6: 1.11.6

Compare Source

🚀 sbt launcher 1.5.0

🐛 bug fixes

🎬 behind the scene

Full Changelog: sbt/sbt@v1.11.5...v1.11.6

v1.11.5: 1.11.5

Compare Source

changes with compatibility implications

  • sbtn is built using ubuntu-22.04 image, which will require similar Linux version with glibc 2.32 and above.

🚀 features and other updates

  • Adds Scala 3.8.0 support. See below
  • Adds Scala Nightly repository resolver. See below
  • Adds --jvm-client to the sbt runner script to launch JVM client. See below
  • Central Repository publishing: Shows validation errors if present by @​unkarjedy in #​8191
  • Central Repository publishing: Includes the root subproject name into the deployment by @​jeanmarc in #​8219
  • Reduces sbtn outputs by @​eed3si9n in #​8234

Scala Nightly repository

Scala Team now publishes nightlies to a dedicated Artifactory instance. sbt 1.11.5 adds a new resolver for this:

resolvers += Resolver.scalaNightlyRepository

ThisBuild / scalaVersion := "3.8.0-RC1-bin-20250823-712d5bc-NIGHTLY"
Compile / scalacOptions += "-language:experimental.captureChecking"

This was contributed by @​hamzaremmal in sbt/librarymanagement#532

Scala 3.8.0 support

Scala 3.8.0 will in-source the Scala standard library (scala-library) instead of using one from Scala 2.13. sbt 1.11.5 relaxes the Coursier same-version enforcement to support Scala 3.8.0.

This was pair programmed by @​hamzaremmal + @​eed3si9n during Scala Days 2025 as #​8226

sbt --jvm-client

sbt 1.11.5 runner script adds new --jvm-client flag to launch the JVM version of the thin client. The implementation is the Scala code which sbtn is based on. This will be useful on platforms or CPU architectures that we do not build sbtn.

This was contributed by @​eed3si9n in #​8232

🎬 behind the scene

new contributors

Full Changelog: sbt/sbt@v1.11.4...v1.11.5

v1.11.4: 1.11.4

Compare Source

Updates

Full Changelog: sbt/sbt@v1.11.3...v1.11.4

v1.11.3: 1.11.3

Compare Source

updates

  • Adds sonaUploadRequestTimeout setting to configure the upload timeout when publishing to the Central Repo by @​guizmaii in #​8171
  • fix: Adds support for pluginCrossBuild/sbtBinaryVersion "1.3", which is used by IntelliJ Scala plugin (fixes #​8166) by @​unkarjedy in #​8167
  • fix: Fixes the import order to satisfy SemanticDB by @​inglor in #​8162

new contributors

Full Changelog: sbt/sbt@v1.11.2...v1.11.3

v1.11.2: 1.11.2

Compare Source

updates

Full Changelog: sbt/sbt@v1.11.1...v1.11.2

v1.11.1: 1.11.1

Compare Source

updates

behind the scene

Full Changelog: sbt/sbt@v1.11.0...v1.11.1

v1.11.0: 1.11.0

Compare Source

Central Repository publishing

The Central Repository (aka Maven Central) has long been the pillar of the JVM ecosystem including Scala. The mechanism to publish libraries to the Central has been hosted by Sonatype as OSS Repository Hosting (OSSRH) via HTTP PUT, but in March it was announced that the endpoint will be sunset in June 2025 in favor of the Central Portal at https://central.sonatype.com/.

sbt 1.11.0 implements a built-in support to publish to Central Repository via the Central Portal. To publish to the Central Portal, first set ThisBuild / publishTo setting to the localStaging repository:

ThisBuild / publishTo := {
  val centralSnapshots = "https://central.sonatype.com/repository/maven-snapshots/"
  if (isSnapshot.value) Some("central-snapshots" at centralSnapshots)
  else localStaging.value
}

Add credentials to the host central.sonatype.com using the generated user token user name and password. sbt 1.11.0 will read from the environment variables SONATYPE_USERNAME and SONATYPE_PASSWORD and append a credential for central.sonatype.com out-of-box, which might be useful for automatic publishing from the CI environment, such as GitHub Actions.

- run: sbt ci-release
  env:
    PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }}
    PGP_SECRET: ${{ secrets.PGP_SECRET }}
    SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
    SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}

When you're ready to publish, call publishSigned task (available via sbt-pgp). At this point, the JARs and POM files will be staged to your local target/sona-staging directory.

Next, call sonaUpload to upload to the Central Portal and manually release the bundle, or call sonaRelease to upload and automatically release to the Central Repository.

This was contributed by @​eed3si9n in #​8126. The feature was inspired by sbt-sonatype workflow pioneered by Taro Saito, and sonatype-central-client spearheaded by David Doyle at Lumidion.

Other updates

Full Changelog: sbt/sbt@v1.10.11...v1.11.0

v1.10.11: 1.10.11

Compare Source

updates

🐛 bug fixes

Full Changelog: sbt/sbt@v1.10.10...v1.10.11

v1.10.10: 1.10.10

Compare Source

🐛 bug fixes

  • fix: Fixes compilation error causing the compilation to retry ten times by @​eed3si9n in #​8054

Full Changelog: sbt/sbt@v1.10.9...v1.10.10

v1.10.9: 1.10.9

Compare Source

🚀 features and other updates

🐛 bug fixes

🎬 behind the scene

new contributors

Full Changelog: sbt/sbt@v1.10.7...v1.10.9

v1.10.8: 1.10.8

Compare Source

sbt 1.10.8 is dead on arrival, please use 1.10.9 when it comes out.

v1.10.7: 1.10.7

Compare Source

🚀 features and other updates

Build directory detection

Starting 1.10.7, the sbt runner script enables build directory detection by default. This means that the sbt will exit with error when launched in a directory without build.sbt or project/, with exceptions of sbt new, sbt --script-version etc.

To override this behavior temporarily, you can use --allow-empty flag. To permanently opt out of the build directory detection, create $XDG_CONFIG_HOME/sbt/sbtopts with --allow-empty in it.

csrMavenDependencyOverride setting

sbt 1.10.7 updates Coursier from 2.1.19 → 2.1.22. sbt 1.10.7 also adds a new setting csrMavenDependencyOverride (default: false), which controls the resolution, which respects Maven dependency override mechanism, also known as bill-of-materials (BOM) POM. Since there is a performance regression in the new resolver, we are setting the default to false.

🐛 bug fixes

  • fix: Add csrMavenDependencyOverride to opt into bill-of-material (BOM) respecting Coursier resolution by @​eed3si9n in #​7970
  • fix: Update the template resolver to use Giter8 0.17.0, which fixes the SLF4J warning by @​eed3si9n in #​7947
  • fix: Update JLine 2 fork to 9a88bc4 and Jansi to 2.4.1, which fixes crash on Windows on ARM by @​Friendseeker in #​7952

🎬 behind the scene

Full Changelog: sbt/sbt@v1.10.6...v1.10.7

v1.10.6: 1.10.6

Compare Source

change with compatibility implication

  • deps: lm-coursier 2.1.6, which updates Coursier 2.1.14 → 2.1.19 by @​eed3si9n in #​7920

    This release changes the way "BOMs" or "dependency management" are handled during resolution, and allows users to add BOMs to a resolution. This changes the way versions are picked when BOMs or dependency management are involved, which has an impact on the resolution of libraries from many JVM ecosystems, such as Apache Spark, Springboot, Quarkus, etc.

bug fixes and updates

behind the scene

new contributors

Full Changelog: sbt/sbt@v1.10.5...v1.10.6

v1.10.5: 1.10.5

Compare Source

updates

behind the scene

Full Changelog: sbt/sbt@v1.10.4...v1.10.5

v1.10.4: 1.10.4

Compare Source

updates and bug fixes

behind the scene

Full Changelog: sbt/sbt@v1.10.3...v1.10.4

v1.10.3: 1.10.3

Compare Source

Protobuf with potential Denial of Service (CVE-2024-7254)

sbt 1.10.3 updates protobuf-java library to 3.25.5 to address CVE-2024-7254 / GHSA-735f-pc8j-v9w8, which states that while parsing unknown fields in the Protobuf Java library, a maliciously crafted message can cause a StackOverflow error. Given the nature of how Protobuf is used in Zinc as internal serialization, we think the impact of this issue is minimum. However, security software might still flag this to be an issue while using sbt or Zinc, so upgrade is advised. This issue was originally reported by @​gabrieljones and was fixed by Jerry Tan (@​Friendseeker) in zinc#1443.

@​adpi2 at Scala Center has also configured dependency graph submission to get security alerts in zinc#1448. sbt/sbt was configured by @​Friendseeker in #​7746.

Reverting the invalidation of circular-dependent sources

sbt 1.10.3 reverts the initial invalidation of circular-dependent Scala source pairs.

There had been a series of incremental compiler bugs such as "Invalid superClass" and "value b is not a member of A" that would go away after clean. The root cause of these bugs were identified by @​smarter (sbt/zinc#598 (comment)) and @​Friendseeker to be partial compilation of circular-dependent sources where two sources A.scala and B.scala use some constructs from each other.

sbt 1.10.0 fixed this issue via sbt/zinc#1284 by invalidating the circular-dependent pairs together. In other words, if A.scala was changed, it would immediately invalidate B.scala. It turns out, that people have been writing circular-dependent code, and this has resulted in multiple reports of Zinc's over-compilation (zinc#1420, zinc#1461). Given that the invalidation seems to affect the users more frequently than the original bug, we're going to revert the fix for now. We might bring this back with an opt-out flag later on. The revert was contributed by by Li Haoyi (@​lihaoyi) in sbt/zinc#1462.

Improvement: ParallelGzipOutputStream

sbt 1.10.0 via sbt/zinc#1326 added a new consistent (repeatable) formats for Analysis storage. As a minor optimization, the pull request also included an implementation of ParallelGzipOutputStream, which would reduce the generate file size by 20%, but with little time penalty. Unfortunately, however, we have observed in CI that that the scala.concurrent.Future-based implementation gets stuck in a deadlock. @​Ichoran and @​Friendseeker have contributed an alternative implementation that uses Java threads directly, which fixes the issue in sbt/zinc#1466.

bug fixes and updates

behind the scene

Full Changelog: sbt/sbt@v1.10.2...v1.10.3

v1.10.2: 1.10.2

Compare Source

Changes with compatibility implications

Updates and bug fixes

Behind the scenes

New contributors

Full Changelog: sbt/sbt@v1.10.0...v1.10.2

v1.10.1: 1.10.1

Compare Source

bug fixes and updates

behind the scenes

Full Changelog: sbt/sbt@v1.10.0...v1.10.1

[v1.10.0](https://redirect.github.com/sbt/sbt/rele


Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate renovate bot added the auto-dep label Sep 26, 2024
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 5b9dfb0 to 41119f7 Compare October 20, 2024 03:48
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.10.2 chore(deps): update dependency sbt/sbt to v1.10.3 Oct 20, 2024
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 41119f7 to fbd1b6b Compare October 28, 2024 13:45
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.10.3 chore(deps): update dependency sbt/sbt to v1.10.4 Oct 28, 2024
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from fbd1b6b to 1cec49b Compare November 4, 2024 05:01
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.10.4 chore(deps): update dependency sbt/sbt to v1.10.5 Nov 4, 2024
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 1cec49b to 574b544 Compare November 30, 2024 10:23
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.10.5 chore(deps): update dependency sbt/sbt to v1.10.6 Nov 30, 2024
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 574b544 to b75b9aa Compare December 23, 2024 04:31
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.10.6 chore(deps): update dependency sbt/sbt to v1.10.7 Dec 23, 2024
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from b75b9aa to 727daca Compare March 3, 2025 23:34
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.10.7 chore(deps): update dependency sbt/sbt to v1.10.9 Mar 3, 2025
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 727daca to a34b91c Compare March 4, 2025 06:49
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.10.9 chore(deps): update dependency sbt/sbt to v1.10.10 Mar 4, 2025
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from a34b91c to 230cc51 Compare March 17, 2025 07:02
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.10.10 chore(deps): update dependency sbt/sbt to v1.10.11 Mar 17, 2025
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 230cc51 to 7b6ddb0 Compare May 24, 2025 10:14
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.10.11 chore(deps): update dependency sbt/sbt to v1.11.0 May 24, 2025
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 7b6ddb0 to be4e465 Compare June 2, 2025 06:42
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.11.0 chore(deps): update dependency sbt/sbt to v1.11.1 Jun 2, 2025
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from be4e465 to ae94939 Compare June 8, 2025 00:51
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.11.1 chore(deps): update dependency sbt/sbt to v1.11.2 Jun 8, 2025
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from ae94939 to 2121a86 Compare July 6, 2025 01:41
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.11.2 chore(deps): update dependency sbt/sbt to v1.11.3 Jul 6, 2025
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 2121a86 to 7fc792b Compare August 4, 2025 14:08
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.11.3 chore(deps): update dependency sbt/sbt to v1.11.4 Aug 4, 2025
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 7fc792b to 7fea404 Compare August 24, 2025 21:10
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.11.4 chore(deps): update dependency sbt/sbt to v1.11.5 Aug 24, 2025
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 7fea404 to 017649e Compare September 7, 2025 23:52
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.11.5 chore(deps): update dependency sbt/sbt to v1.11.6 Sep 7, 2025
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 017649e to 920907d Compare October 5, 2025 21:39
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.11.6 chore(deps): update dependency sbt/sbt to v1.11.7 Oct 5, 2025
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 920907d to 15869e4 Compare January 5, 2026 05:58
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.11.7 chore(deps): update dependency sbt/sbt to v1.12.0 Jan 5, 2026
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 15869e4 to e87b410 Compare January 26, 2026 12:28
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.12.0 chore(deps): update dependency sbt/sbt to v1.12.1 Jan 26, 2026
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from e87b410 to cb0f14f Compare February 4, 2026 09:15
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.12.1 chore(deps): update dependency sbt/sbt to v1.12.2 Feb 4, 2026
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from cb0f14f to 9d413eb Compare February 15, 2026 01:14
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.12.2 chore(deps): update dependency sbt/sbt to v1.12.3 Feb 15, 2026
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 9d413eb to 3697998 Compare February 23, 2026 09:24
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.12.3 chore(deps): update dependency sbt/sbt to v1.12.4 Feb 23, 2026
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 3697998 to 524ab99 Compare March 2, 2026 01:54
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.12.4 chore(deps): update dependency sbt/sbt to v1.12.5 Mar 2, 2026
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 524ab99 to ba9024e Compare March 16, 2026 05:46
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.12.5 chore(deps): update dependency sbt/sbt to v1.12.6 Mar 16, 2026
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from ba9024e to 6274dc2 Compare March 24, 2026 00:24
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.12.6 chore(deps): update dependency sbt/sbt to v1.12.7 Mar 24, 2026
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from 6274dc2 to d5919a1 Compare March 25, 2026 05:58
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.12.7 chore(deps): update dependency sbt/sbt to v1.12.8 Mar 25, 2026
@renovate renovate bot force-pushed the renovate/sbt-sbt-1.x branch from d5919a1 to 77c9ae3 Compare April 7, 2026 05:04
@renovate renovate bot changed the title chore(deps): update dependency sbt/sbt to v1.12.8 chore(deps): update dependency sbt/sbt to v1.12.9 Apr 7, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants