abdolence / sbt-gcs-resolver

SBT plugin for Google Cloud Storage (GCS) and Google Artifact Registry with Coursier support
Apache License 2.0
28 stars 7 forks source link

chore(deps): update dependency sbt/sbt to v1.9.0 #48

Closed renovate[bot] closed 1 year ago

renovate[bot] commented 1 year ago

Mend Renovate

This PR contains the following updates:

Package Update Change
sbt/sbt minor 1.8.2 -> 1.9.0

⚠ Dependency Lookup Warnings ⚠

Warnings were logged while processing this repo. Please check the Dependency Dashboard for more information.


Release Notes

sbt/sbt ### [`v1.9.0`](https://togithub.com/sbt/sbt/releases/tag/v1.9.0): 1.9.0 [Compare Source](https://togithub.com/sbt/sbt/compare/v1.8.3...v1.9.0) ##### Changes with compatibility implications - Deprecates `IntegrationTest` configuration. See below. - Updates underlying Coursier to 2.1.2 by [@​eed3si9n][@​eed3si9n]. ##### Deprecation of IntegrationTest configuration sbt 1.9.0 deprecates `IntegrationTest` configuration. ([RFC-3](/sbt-drop-custom-config/) proposes to deprecate general use of configuration axis beyond `Compile` and `Test`, and this is the first installment of the change.) The recommended migration path is to create a subproject named "integration", or "foo-integration" etc. ```scala lazy val integration = (project in file("integration")) .dependsOn(core) // your current subproject .settings( publish / skip := true, // test dependencies libraryDependencies += something % Test, ) ``` From the shell you can run: ```scala > integration/test ``` Assuming these are slow tests compared to the regular tests, I might not aggregate them at all from other subprojects, and maybe only run it on CI, but it's up to you. Why deprecate `IntegrationTest`? `IntegrationTest` was a demoware for the idea of custom configuration axis, and now that we are planning to deprecate the mechanism to simplify sbt, we wanted to stop advertising it. We won't remove it during sbt 1.x series, but deprecation signals the non-recommendation status. This was contributed by [@​eed3si9n][@​eed3si9n] and [@​mdedetrich][@​mdedetrich] in [lm#​414][lm414]/[#​7261][7261]. ##### POM consistency of sbt plugin publishing sbt 1.9.0 publishes sbt plugin to Maven repository in a POM-consistent way. sbt has been publishing POM file of sbt plugins as `sbt-something-1.2.3.pom` even though the artifact URL is suffixed as `sbt-something_2.12_1.0`. This allowed "sbt-something" to be registered by Maven Central, allowing [search](https://central.sonatype.com/search?smo=true\&q=sbt-pgp). However, as more plugins moved to Maven Central, it was considered that keeping POM consisntency rule was more important, especially for corporate repositories to proxy them. sbt 1.9.0 will publish using both the conventional POM-inconsistent style and POM-consisntent sytle so prior sbt releases can still consume the plugin. However, this can be opted-out using `sbtPluginPublishLegacyMavenStyle` setting. This fix was contributed by Adrien Piquerez ([@​adpi2][@​adpi2]) at Scala Center in [coursier#​2633][coursier2633], [sbt#​7096][7096] etc. Special thanks to William Narmontas ([@​ScalaWilliam][@​ScalaWilliam]) and Wudong Liu ([@​wudong][@​wudong]) whose experimental plugin [sbt-vspp](https://togithub.com/esbeetee/sbt-vspp) paved the way for this feature. ##### `sbt new`, a text-based adventure sbt 1.9.0 adds text-based menu when `sbt new` or `sbt init` is called without arguments: $ sbt -Dsbt.version=1.9.0-RC2 init .... Welcome to sbt new! Here are some templates to get started: a) scala/toolkit.local - Scala Toolkit (beta) by Scala Center and VirtusLab b) typelevel/toolkit.local - Toolkit to start building Typelevel apps c) sbt/cross-platform.local - A cross-JVM/JS/Native project d) scala/scala-seed.g8 - Scala 2 seed template e) playframework/play-scala-seed.g8 - A Play project in Scala f) playframework/play-java-seed.g8 - A Play project in Java g) scala-js/vite.g8 - A Scala.JS + Vite project i) holdenk/sparkProjectTemplate.g8 - A Scala Spark project m) spotify/scio.g8 - A Scio project n) disneystreaming/smithy4s.g8 - A Smithy4s project q) quit Select a template (default: a): Unlike Giter8, `.local` template creates `build.sbt` etc in the **current directory**, and reboots into an sbt session. This was contributed by Eugene Yokota ([@​eed3si9n][@​eed3si9n]) in [#​7228][7228]. ##### Actionable diagnostics steps sbt 1.9.0 adds `actions` to `Problem`, allowing the compiler to suggest code edits as part of the compiler warnings and errors in a structual manner. See [Roadmap for actionable diagnostics][actionable] for more details. The changes were contributed by [@​ckipp01][@​ckipp01] in [#​7242][7242] and [@​eed3si9n][@​eed3si9n] in [bsp#​527][bsp527]/[#​7251][7251]/[zinc#​1186][zinc1186] etc. ##### `releaseNotesURL` setting sbt 1.9.0 adds `releaseNotesURL` setting, which creates `info.releaseNotesUrl` property in the POM file. This will then be used by Scala Steward. See [ Add release notes URLs to your POMs](https://contributors.scala-lang.org/t/add-release-notes-urls-to-your-poms/6059/1) for details. This was contributed by Arman Bilge in [lm#​410][lm410]. ##### Other updates - Updates Scala 2.13 cross build for Zinc to 2.13.10 to address [CVE-2022-36944](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36944) by [@​rhuddleston][@​rhuddleston] - Updates underlying Scala to 2.12.18 for JDK 21-ea in [#​7271][7271] by [@​eed3si9n][@​eed3si9n]. - Fixes Zinc incremental compilation looping infinitely [zinc#​1182][zinc1182] by [@​CarstonSchilds][@​CarstonSchilds] - Fixes `libraryDependencySchemes` not overriding `assumedVersionScheme` [lm#​415][lm415] by [@​adriaanm][@​adriaanm] - Fixes spurious whitespace in the runner script by [@​keynmol][@​keynmol] in [#​7134][7134] - Makes `RunProfiler` available by [@​dragos][@​dragos] in [#​7215][7215] - Makes `publishLocal / skip` work by [@​mdedetrich][@​mdedetrich] in [#​7165][7165] - Fixes NullPointerError under `-Vdebug` by [@​som-snytt][@​som-snytt] in [zinc#​1141][zinc1141] - Fixes Maven `settings.xml` properties expansion by [@​nrinaudo][@​nrinaudo] in [lm#​413][lm413] - Adds `FileFilter.nothing` and `FileFilter.everything` by [@​mdedetrich][@​mdedetrich] in [io#​340][io340] - Adds `Resolver.ApacheMavenSnapshotsRepo` by [@​mdedetrich][@​mdedetrich] - Avoids deprecated `java.net.URL` constructor by [@​xuwei-k][@​xuwei-k] in [io#​341][io341] - Updates to Swoval 2.1.10 by [@​eatkins][@​eatkins] in [io#​343][io343] - Updates to sbt-giter8-resolver 0.16.2 by [@​eed3si9n][@​eed3si9n] - Fixes dead lock between `LoggerContext` and `Terminal` by [@​adpi2][@​adpi2] in [#​7191][7191] - Notifies `ClassFileManager` from `IncOptions` in `Incremental.prune` by [@​lrytz] in [zinc1148][zinc1148] - Updates usage info for java-home in the runner script by [@​liang3zy22][@​liang3zy22] in [#​7171][7171] - Deprecates misspelled `Problem#diagnosticRelatedInforamation` by [@​ckipp01][@​ckipp01] in [#​7241][7241] - Adds built-in support for weaver-cats test framework [#​7263][7263] by [@​kubukoz][@​kubukoz] ##### Behind the scene - Replaces olafurpg/setup-scala with actions/setup-java by [@​mzuehlke][@​mzuehlke] in [#​7154][7154] - Uses `sonatypeOssRepos` instead of `sonatypeRepo` by [@​yoshinorin][@​yoshinorin] in [#​7227][7227] [@​eed3si9n]: https://togithub.com/eed3si9n [@​Nirvikalpa108]: https://togithub.com/Nirvikalpa108 [@​adpi2]: https://togithub.com/adpi2 [@​er1c]: https://togithub.com/er1c [@​eatkins]: https://togithub.com/eatkins [@​dwijnand]: https://togithub.com/dwijnand [@​ckipp01]: https://togithub.com/ckipp01 [@​mdedetrich]: https://togithub.com/mdedetrich [@​xuwei-k]: https://togithub.com/xuwei-k [@​nrinaudo]: https://togithub.com/nrinaudo [@​CarstonSchilds]: https://togithub.com/CarstonSchilds [@​som-snytt]: https://togithub.com/som-snytt [@​lrytz]: https://togithub.com/lrytz [@​dragos]: https://togithub.com/dragos [@​keynmol]: https://togithub.com/keynmol [@​mzuehlke]: https://togithub.com/mzuehlke [@​yoshinorin]: https://togithub.com/yoshinorin [@​liang3zy22]: https://togithub.com/liang3zy22 [@​adriaanm]: https://togithub.com/adriaanm [@​wudong]: https://togithub.com/wudong [@​ScalaWilliam]: https://togithub.com/ScalaWilliam [@​rhuddleston]: https://togithub.com/rhuddleston [@​kubukoz]: https://togithub.com/kubukoz [7096]: https://togithub.com/sbt/sbt/pull/7096 [7215]: ttps://github.com/sbt/sbt/pull/7215 [7191]: https://togithub.com/sbt/sbt/pull/7191 [7228]: https://togithub.com/sbt/sbt/pull/7228 [7134]: https://togithub.com/sbt/sbt/pull/7134 [7165]: https://togithub.com/sbt/sbt/pull/7165 [7154]: https://togithub.com/sbt/sbt/pull/7154 [7227]: https://togithub.com/sbt/sbt/pull/7227 [7171]: https://togithub.com/sbt/sbt/pull/7171 [7234]: https://togithub.com/sbt/sbt/pull/7234 [7241]: https://togithub.com/sbt/sbt/pull/7241 [7242]: https://togithub.com/sbt/sbt/pull/7242 [7251]: https://togithub.com/sbt/sbt/pull/7251 [7271]: https://togithub.com/sbt/sbt/pull/7271 [7261]: https://togithub.com/sbt/sbt/pull/7261 [7263]: https://togithub.com/sbt/sbt/pull/7263 [zinc1182]: https://togithub.com/sbt/zinc/pull/1182 [zinc1141]: https://togithub.com/sbt/zinc/pull/1141 [zinc1148]: https://togithub.com/sbt/zinc/pull/1148 [zinc1186]: https://togithub.com/sbt/zinc/pull/1186 [zinc1196]: https://togithub.com/sbt/zinc/pull/1196 [lm410]: https://togithub.com/sbt/librarymanagement/pull/410 [lm411]: https://togithub.com/sbt/librarymanagement/pull/411 [lm413]: https://togithub.com/sbt/librarymanagement/pull/413 [lm414]: https://togithub.com/sbt/librarymanagement/pull/414 [lm415]: https://togithub.com/sbt/librarymanagement/pull/415 [io340]: https://togithub.com/sbt/io/pull/340 [io341]: https://togithub.com/sbt/io/pull/341 [io343]: https://togithub.com/sbt/io/pull/343 [coursier2633]: https://togithub.com/coursier/coursier/pull/2633 [io344]: https://togithub.com/sbt/io/pull/344 [zinc1185]: https://togithub.com/sbt/zinc/pull/1185 [zinc1186]: https://togithub.com/sbt/zinc/pull/1186 [bsp527]: https://togithub.com/build-server-protocol/build-server-protocol/pull/527 [actionable]: https://contributors.scala-lang.org/t/roadmap-for-actionable-diagnostics/6172/1 ### [`v1.8.3`](https://togithub.com/sbt/sbt/releases/tag/v1.8.3): 1.8.3 [Compare Source](https://togithub.com/sbt/sbt/compare/v1.8.2...v1.8.3) ##### Security fix - Fixes `sbt.io.IO.withTemporaryFile` not limiting access on Unix-like systems in [io#​344][io344]/[zinc#​1185][zinc1185] by [@​eed3si9n][@​eed3si9n] ##### IO.withTemporaryFile fix sbt 1.8.3 fixes `sbt.io.IO.withTemporaryFile` etc not limiting access on Unix-like systems. Prior to this patch release, some functions were using `java.io.File.createTempFile`, which does not set strict file permissions, as opposed to the NIO-equivalent that does. This means that on a shared Unix-like systems, build user or plugin's use of `sbt.io.IO.withTemporaryFile` etc would have exposed the information to other users. This issue was reported by Oleksandr Zolotko at IBM, and was fixed by Eugene Yokota ([@​eed3si9n][@​eed3si9n]) in [io#​344][io344]/[zinc#​1185][zinc1185]. ##### Other updates sbt 1.8.3 backports Zinc and IO fixes from 1.9.0-RC2 as well. - Fixes Zinc incremental compilation looping infinitely [zinc#​1182][zinc1182] by [@​CarstonSchilds][@​CarstonSchilds] - Fixes spurious whitespace in the runner script by [@​keynmol][@​keynmol] in [#​7134][7134] - Fixes NullPointerError under `-Vdebug` by [@​som-snytt][@​som-snytt] in [zinc#​1141][zinc1141] - Avoids deprecated `java.net.URL` constructor by [@​xuwei-k][@​xuwei-k] in [io#​341][io341] - Updates to Swoval 2.1.10 by [@​eatkins][@​eatkins] in [io#​343][io343] - Notifies `ClassFileManager` from `IncOptions` in `Incremental.prune` by [@​lrytz] in [zinc1148][zinc1148] - Adds `FileFilter.nothing` and `FileFilter.everything` by [@​mdedetrich][@​mdedetrich] in [io#​340][io340] [@​eed3si9n]: https://togithub.com/eed3si9n [@​Nirvikalpa108]: https://togithub.com/Nirvikalpa108 [@​adpi2]: https://togithub.com/adpi2 [@​er1c]: https://togithub.com/er1c [@​eatkins]: https://togithub.com/eatkins [@​dwijnand]: https://togithub.com/dwijnand [@​ckipp01]: https://togithub.com/ckipp01 [@​mdedetrich]: https://togithub.com/mdedetrich [@​xuwei-k]: https://togithub.com/xuwei-k [@​nrinaudo]: https://togithub.com/nrinaudo [@​CarstonSchilds]: https://togithub.com/CarstonSchilds [@​som-snytt]: https://togithub.com/som-snytt [@​lrytz]: https://togithub.com/lrytz [@​dragos]: https://togithub.com/dragos [@​keynmol]: https://togithub.com/keynmol [@​mzuehlke]: https://togithub.com/mzuehlke [@​yoshinorin]: https://togithub.com/yoshinorin [@​liang3zy22]: https://togithub.com/liang3zy22 [@​adriaanm]: https://togithub.com/adriaanm [7096]: https://togithub.com/sbt/sbt/pull/7096 [7215]: ttps://github.com/sbt/sbt/pull/7215 [7191]: https://togithub.com/sbt/sbt/pull/7191 [7228]: https://togithub.com/sbt/sbt/pull/7228 [7134]: https://togithub.com/sbt/sbt/pull/7134 [7165]: https://togithub.com/sbt/sbt/pull/7165 [7154]: https://togithub.com/sbt/sbt/pull/7154 [7227]: https://togithub.com/sbt/sbt/pull/7227 [7171]: https://togithub.com/sbt/sbt/pull/7171 [7234]: https://togithub.com/sbt/sbt/pull/7234 [zinc1182]: https://togithub.com/sbt/zinc/pull/1182 [zinc1141]: https://togithub.com/sbt/zinc/pull/1141 [zinc1148]: https://togithub.com/sbt/zinc/pull/1148 [lm410]: https://togithub.com/sbt/librarymanagement/pull/410 [lm411]: https://togithub.com/sbt/librarymanagement/pull/411 [lm413]: https://togithub.com/sbt/librarymanagement/pull/413 [lm415]: https://togithub.com/sbt/librarymanagement/pull/415 [io340]: https://togithub.com/sbt/io/pull/340 [io341]: https://togithub.com/sbt/io/pull/341 [io343]: https://togithub.com/sbt/io/pull/343 [coursier2633]: https://togithub.com/coursier/coursier/pull/2633 [io344]: https://togithub.com/sbt/io/pull/344 [zinc1185]: https://togithub.com/sbt/zinc/pull/1185

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.



This PR has been generated by Mend Renovate. View repository job log here.