[Infra] [Security] [3.2 backport] Update Scala and packages dependencies - Githubissues

delta-io / delta

An open-source storage framework that enables building a Lakehouse architecture with compute engines including Spark, PrestoDB, Flink, Trino, and Hive and APIs

https://delta.io

Apache License 2.0

6.96k stars 1.58k forks source link

[Infra] [Security] [3.2 backport] Update Scala and packages dependencies #3007

Closed scottsand-db closed 2 weeks ago

scottsand-db commented 2 weeks ago

Delta 3.2 cherry-pick of master commit 8eb3bb32552b8d02494c4ed6cf505b39b4a20180 authored by @felipepessoto

Which Delta project/connector is this regarding?

[X] Spark
[X] Standalone
[X] Flink
[X] Kernel
[ ] Other (fill in here)

Description

We haven't updated some dependencies for a while, exposing us to security risks.

This PR updates:

Scala 2.12 to 2.12.18 (the same used by Spark 3.5 branch)
Scala 2.13 to 2.13.13 (the same in Spark master branch). https://github.com/advisories/GHSA-8qv5-68g4-248j
Update SBT to 1.9.9. https://github.com/advisories/GHSA-h9mw-grgx-2fhf
Update JUnit. Fix https://github.com/delta-io/delta/issues/1518 - https://github.com/advisories/GHSA-269g-pwp5-87pp
Update plugins: sbt-mima-plugin and sbt-scoverage

How was this patch tested?

CI

Does this PR introduce any user-facing changes?

No