search

polystat / polystat-cli

MIT License
5 stars 3 forks source link

Update dependency sbt/sbt to v1.10.3 #44

Open renovate[bot] opened 1 month ago

renovate[bot] commented 1 month ago

This PR contains the following updates:

Package Update Change
sbt/sbt minor 1.7.1 -> 1.10.3

Release Notes

sbt/sbt (sbt/sbt) ### [`v1.10.3`](https://redirect.github.com/sbt/sbt/releases/tag/v1.10.3): 1.10.3 [Compare Source](https://redirect.github.com/sbt/sbt/compare/v1.10.2...v1.10.3) #### Protobuf with potential Denial of Service (CVE-2024-7254) sbt 1.10.3 updates protobuf-java library to 3.25.5 to address CVE-2024-7254 / https://github.com/advisories/GHSA-735f-pc8j-v9w8, which states that while parsing unknown fields in the Protobuf Java library, a maliciously crafted message can cause a StackOverflow error. Given the nature of how Protobuf is used in Zinc as internal serialization, we think the impact of this issue is minimum. However, security software might still flag this to be an issue while using sbt or Zinc, so upgrade is advised. This issue was originally reported by [@​gabrieljones](https://redirect.github.com/gabrieljones) and was fixed by Jerry Tan ([@​Friendseeker](https://redirect.github.com/Friendseeker)) in [zinc#1443](https://redirect.github.com/zinc/sbt/issues/1443). [@​adpi2](https://redirect.github.com/adpi2) at Scala Center has also configured dependency graph submission to get security alerts in [zinc#1448](https://redirect.github.com/zinc/sbt/issues/1448). sbt/sbt was configured by [@​Friendseeker](https://redirect.github.com/Friendseeker) in [https://github.com/sbt/sbt/pull/7746](https://redirect.github.com/sbt/sbt/pull/7746). #### Reverting the invalidation of circular-dependent sources sbt 1.10.3 reverts the initial invalidation of circular-dependent Scala source pairs. There had been a series of incremental compiler bugs such as "Invalid superClass" and "value b is not a member of A" that would go away after `clean`. The root cause of these bugs were identified by [@​smarter](https://redirect.github.com/smarter) ([https://github.com/sbt/zinc/issues/598#issuecomment-449028234](https://redirect.github.com/sbt/zinc/issues/598#issuecomment-449028234)) and [@​Friendseeker](https://redirect.github.com/Friendseeker) to be partial compilation of circular-dependent sources where two sources `A.scala` and `B.scala` use some constructs from each other. sbt 1.10.0 fixed this issue via [https://github.com/sbt/zinc/pull/1284](https://redirect.github.com/sbt/zinc/pull/1284) by invalidating the circular-dependent pairs together. In other words, if `A.scala` was changed, it would immediately invalidate `B.scala`. It turns out, that people have been writing circular-dependent code, and this has resulted in multiple reports of Zinc's over-compilation ([zinc#1420](https://redirect.github.com/sbt/zinc/issues/1420), [zinc#1461](https://redirect.github.com/sbt/zinc/issues/1461)). Given that the invalidation seems to affect the users more frequently than the original bug, we're going to revert the fix for now. We might bring this back with an opt-out flag later on. The revert was contributed by by Li Haoyi ([@​lihaoyi](https://redirect.github.com/lihaoyi)) in [https://github.com/sbt/zinc/pull/1462](https://redirect.github.com/sbt/zinc/pull/1462). #### Improvement: ParallelGzipOutputStream sbt 1.10.0 via [https://github.com/sbt/zinc/pull/1326](https://redirect.github.com/sbt/zinc/pull/1326) added a new consistent (repeatable) formats for Analysis storage. As a minor optimization, the pull request also included an implementation of `ParallelGzipOutputStream`, which would reduce the generate file size by 20%, but with little time penalty. Unfortunately, however, we have observed in CI that that the `scala.concurrent.Future`-based implementation gets stuck in a deadlock. [@​Ichoran](https://redirect.github.com/Ichoran) and [@​Friendseeker](https://redirect.github.com/Friendseeker) have contributed an alternative implementation that uses Java threads directly, which fixes the issue in [https://github.com/sbt/zinc/pull/1466](https://redirect.github.com/sbt/zinc/pull/1466). #### bug fixes and updates - deps: Updates metabuild Scala version to 2.12.20 by [@​SethTisue](https://redirect.github.com/SethTisue) in [#​7636](https://redirect.github.com/sbt/sbt/pull/7636) - fix: Fixes "illegal reflective access operation" error on JDK 11 by updating JLine to 3.27.0 by [@​Friendseeker](https://redirect.github.com/Friendseeker) in [#​7695](https://redirect.github.com/sbt/sbt/pull/7695) - fix: Fixes transitive invalidation interfering with cycle stopping condition by [@​Friendseeker](https://redirect.github.com/Friendseeker) in [zinc#1397](https://redirect.github.com/sbt/zinc/pull/1397) - fix: Fixes dependency resolution of sbt plugins by excluding custom extra attributes from POM dependencies by [@​adpi2](https://redirect.github.com/adpi2) in [lm#451](https://redirect.github.com/sbt/librarymanagement/pull/451) - fix: Fixes directory permission issue under a multi-user environment by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [ipcsocket#43](https://redirect.github.com/sbt/ipcsocket/pull/43) - deps: Updates `sbt init` template deps by [@​xuwei-k](https://redirect.github.com/xuwei-k) in [#​7730](https://redirect.github.com/sbt/sbt/pull/7730) - Updates sbt runner to default to sbtn for sbt 2.x by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [#​7775](https://redirect.github.com/sbt/sbt/pull/7775) #### behind the scene - ci: Bump CI to JDK 21 by [@​Friendseeker](https://redirect.github.com/Friendseeker) in [https://github.com/sbt/sbt/pull/7760](https://redirect.github.com/sbt/sbt/pull/7760) - refactor: Remove deprecated `System.runFinalization` by [@​Friendseeker](https://redirect.github.com/Friendseeker) in [https://github.com/sbt/sbt/pull/7732](https://redirect.github.com/sbt/sbt/pull/7732) - refactor: Remove deprecated `Thread.getId` by [@​Friendseeker](https://redirect.github.com/Friendseeker) in [https://github.com/sbt/sbt/pull/7733](https://redirect.github.com/sbt/sbt/pull/7733) - refactor: Regenerate Contraband files by [@​Friendseeker](https://redirect.github.com/Friendseeker) in [https://github.com/sbt/sbt/pull/7764](https://redirect.github.com/sbt/sbt/pull/7764) - deps: Bump IO, ipc-socket, and launcher by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/sbt/pull/7776](https://redirect.github.com/sbt/sbt/pull/7776) - deps: Zinc 1.10.3 by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/sbt/pull/7781](https://redirect.github.com/sbt/sbt/pull/7781) - deps: lm 1.10.2 by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/sbt/pull/7782](https://redirect.github.com/sbt/sbt/pull/7782) - ci: Set a default timeout for ci by [@​nathanlao](https://redirect.github.com/nathanlao) in [https://github.com/sbt/sbt/pull/7766](https://redirect.github.com/sbt/sbt/pull/7766) - ci: Removes `vscode-sbt-scala` from build.sbt by [@​Friendseeker](https://redirect.github.com/Friendseeker) in [https://github.com/sbt/sbt/pull/7728](https://redirect.github.com/sbt/sbt/pull/7728) - ci: Adds dependabot setting for develop branch by [@​xuwei-k](https://redirect.github.com/xuwei-k) in [https://github.com/sbt/sbt/pull/7701](https://redirect.github.com/sbt/sbt/pull/7701) **Full Changelog**: https://github.com/sbt/sbt/compare/v1.10.2...v1.10.3 ### [`v1.10.2`](https://redirect.github.com/sbt/sbt/releases/tag/v1.10.2): 1.10.2 [Compare Source](https://redirect.github.com/sbt/sbt/compare/v1.10.1...v1.10.2) #### Changes with compatibility implications - Uses `_sbt2_3` suffix for sbt 2.x by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/sbt/pull/7671](https://redirect.github.com/sbt/sbt/pull/7671) #### Updates and bug fixes - Fixes the attribute key name from `serverIdleTimeOut` to `serverIdleTimeout` to match the variable name by [@​lervag](https://redirect.github.com/lervag) in [https://github.com/sbt/sbt/pull/7651](https://redirect.github.com/sbt/sbt/pull/7651) - Fixes incremental Scala-Java mixed compilation that produces JAR directly by [@​adpi2](https://redirect.github.com/adpi2) in [https://github.com/sbt/zinc/pull/1377](https://redirect.github.com/sbt/zinc/pull/1377) - Fixes over-compilation when using a class directory as a library by [@​adpi2](https://redirect.github.com/adpi2) in [https://github.com/sbt/zinc/pull/1382](https://redirect.github.com/sbt/zinc/pull/1382) - Perf: Copy bytes directly instead of using `scala.reflect.io.Streamable` by [@​rochala](https://redirect.github.com/rochala) in [https://github.com/sbt/zinc/pull/1395](https://redirect.github.com/sbt/zinc/pull/1395) - Includes all sources and resources in source jar by [@​jroper](https://redirect.github.com/jroper) in [https://github.com/sbt/sbt/pull/7630](https://redirect.github.com/sbt/sbt/pull/7630) - Fixes the handling of `Optional` inter-project dependency in BSP by [@​adpi2](https://redirect.github.com/adpi2) in [https://github.com/sbt/sbt/pull/7568](https://redirect.github.com/sbt/sbt/pull/7568) - Trims spaces around k and v to tolerate extra whitespace in `build.properties` by [@​invadergir](https://redirect.github.com/invadergir) in [https://github.com/sbt/sbt/pull/7585](https://redirect.github.com/sbt/sbt/pull/7585) - Fixes legacy repositories like `scala-tools-releases` in `repositories` file blocking sbt from launching by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/launcher/pull/104](https://redirect.github.com/sbt/launcher/pull/104) - Fixes stale BSP diagnostics by [@​SlowBrainDude](https://redirect.github.com/SlowBrainDude) in [https://github.com/sbt/sbt/pull/7610](https://redirect.github.com/sbt/sbt/pull/7610) - Fixes scripted support for sbt 2.x by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/sbt/pull/7672](https://redirect.github.com/sbt/sbt/pull/7672) - Avoids using `ThreadDeath` for future JDK compatibility by [@​xuwei-k](https://redirect.github.com/xuwei-k) in [https://github.com/sbt/sbt/pull/7652](https://redirect.github.com/sbt/sbt/pull/7652) - Avoids using `ZipError` for future JDK compatibility by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/zinc/pull/1393](https://redirect.github.com/sbt/zinc/pull/1393) #### Behind the scenes - Update to Zinc 1.10.2 by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/sbt/pull/7674](https://redirect.github.com/sbt/sbt/pull/7674) - Update to lm 1.10.1 by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/sbt/pull/7597](https://redirect.github.com/sbt/sbt/pull/7597) - Update to Launcher 1.4.3 by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/sbt/pull/7598](https://redirect.github.com/sbt/sbt/pull/7598) - Update to the common Scala 2.12 version for the sbtn subproject by [@​SlowBrainDude](https://redirect.github.com/SlowBrainDude) in [https://github.com/sbt/sbt/pull/7605](https://redirect.github.com/sbt/sbt/pull/7605) - Note in dev docs on supported build time JDK version dependency by [@​SlowBrainDude](https://redirect.github.com/SlowBrainDude) in [https://github.com/sbt/sbt/pull/7606](https://redirect.github.com/sbt/sbt/pull/7606) - CI: Zinc default branch is 1.10.x by [@​adpi2](https://redirect.github.com/adpi2) in [https://github.com/sbt/sbt/pull/7654](https://redirect.github.com/sbt/sbt/pull/7654) - Upgrade sbt plugins to avoid deprecated repo.scala-sbt.org by [@​mkurz](https://redirect.github.com/mkurz) in [https://github.com/sbt/sbt/pull/7555](https://redirect.github.com/sbt/sbt/pull/7555) - Update Scala 3 doc test by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/sbt/pull/7619](https://redirect.github.com/sbt/sbt/pull/7619) - Bump scalacenter/sbt-dependency-submission from 2 to 3 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sbt/sbt/pull/7565](https://redirect.github.com/sbt/sbt/pull/7565) - Fixes `dependency-management/force-update-period` test (backport of [#​7538](https://redirect.github.com/sbt/sbt/issues/7538)) by [@​adpi2](https://redirect.github.com/adpi2) in [https://github.com/sbt/sbt/pull/7567](https://redirect.github.com/sbt/sbt/pull/7567) - Fixes BuildServerTest by [@​adpi2](https://redirect.github.com/adpi2) in [https://github.com/sbt/sbt/pull/7638](https://redirect.github.com/sbt/sbt/pull/7638) #### New contributors - [@​invadergir](https://redirect.github.com/invadergir) made their first contribution in [https://github.com/sbt/sbt/pull/7585](https://redirect.github.com/sbt/sbt/pull/7585) - [@​rochala](https://redirect.github.com/rochala) made their first contribution in [https://github.com/sbt/zinc/pull/1395](https://redirect.github.com/sbt/zinc/pull/1395) - [@​SlowBrainDude](https://redirect.github.com/SlowBrainDude) made their first contribution in [https://github.com/sbt/sbt/pull/7606](https://redirect.github.com/sbt/sbt/pull/7606) - [@​lervag](https://redirect.github.com/lervag) made their first contribution in [https://github.com/sbt/sbt/pull/7651](https://redirect.github.com/sbt/sbt/pull/7651) **Full Changelog**: https://github.com/sbt/sbt/compare/v1.10.0...v1.10.2 ### [`v1.10.1`](https://redirect.github.com/sbt/sbt/releases/tag/v1.10.1): 1.10.1 [Compare Source](https://redirect.github.com/sbt/sbt/compare/v1.10.0...v1.10.1) #### bug fixes and updates - Fixes column/position information missing from the javac error messages in IntelliJ by [@​vasilmkd](https://redirect.github.com/vasilmkd) in [https://github.com/sbt/zinc/pull/1373](https://redirect.github.com/sbt/zinc/pull/1373) - Fixes backslash handling in `expandMavenSettings` by [@​desbo](https://redirect.github.com/desbo) in [https://github.com/sbt/librarymanagement/pull/444](https://redirect.github.com/sbt/librarymanagement/pull/444) - Fixes JSON serialization of `Map` and `LList` in sjson-new 0.10.1 by [@​steinybot](https://redirect.github.com/steinybot) + [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/eed3si9n/sjson-new/pull/142](https://redirect.github.com/eed3si9n/sjson-new/pull/142) - Fixes the hash code for empty files in the classpath cache by [@​szeiger](https://redirect.github.com/szeiger) in [https://github.com/sbt/zinc/pull/1366](https://redirect.github.com/sbt/zinc/pull/1366) - Fixes `forceUpdatePeriod` by [@​adpi2](https://redirect.github.com/adpi2) in [https://github.com/sbt/sbt/pull/7567](https://redirect.github.com/sbt/sbt/pull/7567) - Fixes BSP handling of `Optional` inter-project dependencies by [@​adpi2](https://redirect.github.com/adpi2) in [https://github.com/sbt/sbt/pull/7568](https://redirect.github.com/sbt/sbt/pull/7568) - Ignores `jcenter` and `scala-tools-releases` entries in the `~/.sbt/repositories` file by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/launcher/pull/104](https://redirect.github.com/sbt/launcher/pull/104) #### behind the scenes - Updates sbt plugins to avoid deprecated repo.scala-sbt.org by [@​mkurz](https://redirect.github.com/mkurz) in [https://github.com/sbt/sbt/pull/7555](https://redirect.github.com/sbt/sbt/pull/7555) - Updates scalacenter/sbt-dependency-submission from 2 to 3 by [@​dependabot](https://redirect.github.com/dependabot) in [https://github.com/sbt/sbt/pull/7565](https://redirect.github.com/sbt/sbt/pull/7565) **Full Changelog**: https://github.com/sbt/sbt/compare/v1.10.0...v1.10.1 ### [`v1.10.0`](https://redirect.github.com/sbt/sbt/releases/tag/v1.10.0): 1.10.0 [Compare Source](https://redirect.github.com/sbt/sbt/compare/v1.9.9...v1.10.0) [@​eed3si9n]: https://redirect.github.com/eed3si9n [@​adpi2]: https://redirect.github.com/adpi2 [@​dwijnand]: https://redirect.github.com/dwijnand [@​xuwei-k]: https://redirect.github.com/xuwei-k [@​mdedetrich]: https://redirect.github.com/mdedetrich [@​mkurz]: https://redirect.github.com/mkurz [@​hvesalai]: https://redirect.github.com/hvesalai [@​Friendseeker]: https://redirect.github.com/Friendseeker [@​RustedBones]: https://redirect.github.com/RustedBones [@​minkyu97]: https://redirect.github.com/minkyu97 [@​azdrojowa123]: https://redirect.github.com/azdrojowa123 [@​SethTisue]: https://redirect.github.com/SethTisue [@​Tammo0987]: https://redirect.github.com/Tammo0987 [@​azolotko]: https://redirect.github.com/azolotko [@​rtyley]: https://redirect.github.com/rtyley [@​mazugrin]: https://redirect.github.com/mazugrin [7350]: https://redirect.github.com/sbt/sbt/pull/7350 [7352]: https://redirect.github.com/sbt/sbt/pull/7352 [7470]: https://redirect.github.com/sbt/sbt/pull/7470 [7475]: https://redirect.github.com/sbt/sbt/pull/7475 [7480]: https://redirect.github.com/sbt/sbt/pull/7480 [7496]: https://redirect.github.com/sbt/sbt/pull/7496 [7516]: https://redirect.github.com/sbt/sbt/pull/7516 [7513]: https://redirect.github.com/sbt/sbt/pull/7513 [7419]: https://redirect.github.com/sbt/sbt/pull/7419 [7389]: https://redirect.github.com/sbt/sbt/pull/7389 [7398]: https://redirect.github.com/sbt/sbt/pull/7398 [7178]: https://redirect.github.com/sbt/sbt/pull/7178 [7437]: https://redirect.github.com/sbt/sbt/pull/7437 [7545]: https://redirect.github.com/sbt/sbt/pull/7545 [sip51]: https://docs.scala-lang.org/sips/drop-stdlib-forwards-bin-compat.html [zinc1319]: https://redirect.github.com/sbt/zinc/pull/1319 [zinc1316]: https://redirect.github.com/sbt/zinc/pull/1316 [zinc1314]: https://redirect.github.com/sbt/zinc/pull/1314 [zinc1326]: https://redirect.github.com/sbt/zinc/pull/1326 [zinc1324]: https://redirect.github.com/sbt/zinc/pull/1324 [zinc1312]: https://redirect.github.com/sbt/zinc/pull/1312 [zinc1310]: https://redirect.github.com/sbt/zinc/pull/1310 [zinc1278]: https://redirect.github.com/sbt/zinc/pull/1278 [zinc1284]: https://redirect.github.com/sbt/zinc/pull/1284 [zinc1259]: https://redirect.github.com/sbt/zinc/pull/1259 [zinc1277]: https://redirect.github.com/sbt/zinc/pull/1277 [zinc1265]: https://redirect.github.com/sbt/zinc/pull/1265 [zinc1289]: https://redirect.github.com/sbt/zinc/pull/1289 [zinc1290]: https://redirect.github.com/sbt/zinc/pull/1290 [zinc1282]: https://redirect.github.com/sbt/zinc/pull/1282 [zinc1293]: https://redirect.github.com/sbt/zinc/pull/1293 [zinc1288]: https://redirect.github.com/sbt/zinc/pull/1288 [zinc1287]: https://redirect.github.com/sbt/zinc/pull/1287 [lm436]: https://redirect.github.com/sbt/librarymanagement/pull/436 [lm433]: https://redirect.github.com/sbt/librarymanagement/pull/433 #### Changes with compatibility implications - For SIP-51 support, `scalaVersion` can no longer be a lower 2.13.x version number than its transitive depdencies. See below for details. - ConsistentAnalysisFormat is enabled by default. See below for details. - Updates lm-coursier-shaded to 2.1.4, which brings in Coursier 2.1.9 [#​7513][7513]. - Updates Jsch to [mwiede/jsch](https://redirect.github.com/mwiede/jsch) fork by [@​azolotko][@​azolotko] in [lm#436][lm436] - Updates the Scala version used by sbt 1.x to 2.12.19 by [@​SethTisue][@​SethTisue] in [#​7516][7516]. #### SIP-51 Support for Scala 2.13 Evolution Modern Scala 2.x has kept both forward and backward binary compatibility so a library compiled using Scala 2.13.12 can be used by an application compiled with Scala 2.13.11 etc, and vice versa. The forward compatibility restricts Scala 2.x from evolving during the patch releases, so in [SIP-51][sip51] Lukas Rytz at Lightbend Scala Team proposed: > I propose to drop the forwards binary compatibility requirement that build tools enforce on the Scala 2.13 standard library. This will allow implementing performance optimizations of collection operations that are currently not possible. It also unblocks adding new classes and new members to existing classes in the standard library. Lukas has also contributed changes to sbt 1.10.0 to enforce stricter `scalaVersion`. Starting sbt 1.10.0, when a Scala 2.13.x patch version newer than `scalaVersion` is found, it will fail the build as follows: ```scala sbt:foo> run [error] stack trace is suppressed; run last scalaInstance for the full output [error] (scalaInstance) expected `foo/scalaVersion` to be "2.13.10" or later, [error] but found "2.13.5"; upgrade scalaVerion to fix the build. [error] [error] to support backwards-only binary compatibility (SIP-51), [error] the Scala 2.13 compiler cannot be older than scala-library on the [error] dependency classpath. [error] see `foo/evicted` to know why scala-library 2.13.10 is getting pulled in. ``` When you see the error message like above, you can fix this by updating the Scala version to the suggested version (e.g. 2.13.10): ```scala ThisBuild / scalaVersion := "2.13.10" ``` Side note: Old timers might know that [sbt 0.13.0](https://www.scala-sbt.org/0.13/docs/ChangeSummary\_0.13.0.html#sbt+0.13.0) also introduced the idea of *scala-library as a normal dependency*. This created various confusions as developers expected `scalaVersion`, compiler version, and scala-library version as expected to align. With the hindsight, sbt 1.10.0 will continue to respect `scalaVersion` to be the source-of-truth, but will reject bad ones at build time. This was contributed by Lukas Rytz in [#​7480][7480]. #### Zinc fixes - Fixes macro undercompilation by invalidating macro call sites when a type parameter changes by [@​Friendseeker][@​Friendseeker] in [zinc#1316][zinc1316] - Fixes macro undercompilation by invalidating macro source when its dependency changes by [@​dwijnand][@​dwijnand] in [zinc#1282][zinc1282] - Fixes SAM type undercompilation by [@​Friendseeker][@​Friendseeker] in [zinc#1288][zinc1288] - Fixes infinite incremental loop when Scala and Java are involved by [@​Friendseeker][@​Friendseeker] in [zinc#1312][zinc1312] - Fixes overcompilation on default parameter changes by [@​Friendseeker][@​Friendseeker] in [zinc#1324][zinc1324] - Fixes `IncOptions.useOptimizedSealed` not working for Scala 2.13 by [@​Friendseeker][@​Friendseeker] in [zinc#1278][zinc1278] - Includes extra invalidations in initial validation to fix initial compilation error by [@​Friendseeker][@​Friendseeker] in [zinc#1284][zinc1284] - Refixes compact names without breaking local names by [@​dwijnand][@​dwijnand] in [zinc#1259][zinc1259] - Undoes Protobuf workaround for build to work on Apple Silicon by [@​Friendseeker][@​Friendseeker] in [zinc#1277][zinc1277] - Uses `ClassTag` instead of `Manifest` by [@​xuwei-k][@​xuwei-k] in [zinc#1265][zinc1265] - Encodes parent trait private members in `extraHash` to propagate `TraitPrivateMembersModified` across external dependency by [@​Friendseeker][@​Friendseeker] in [zinc#1289][zinc1289] - Includes internal dependency in `extraHash` computation by [@​Friendseeker][@​Friendseeker] in [zinc#1290][zinc1290] - Deletes products of previous analysis when dropping previous analysis by [@​Friendseeker][@​Friendseeker] in [zinc#1293][zinc1293] - Uses the most up-to-date analysis for binary to source class name lookup by [@​Friendseeker][@​Friendseeker] in [zinc#1287][zinc1287] - Fixes inconsistent Analysis by removing source stamp caching by [@​Friendseeker][@​Friendseeker] in [zinc#1319][zinc1319] - Invalidate sources that depends on `@inline` methods in Scala 2.x by [@​Friendseeker][@​Friendseeker] in [zinc#1310][zinc1310] - Fixes `-Xshow-phases` handling by [@​Friendseeker][@​Friendseeker] in [zinc#1314][zinc1314] #### ConsistentAnalysisFormat: new Zinc Analysis serialization sbt 1.10.0 adds a new Zinc serialization format that is faster and repeatable, unlike the current Protobuf-based serialization. Benchmark data based on scala-library + reflect + compiler: | | Write time | Read time | File size | |-----------------------------|------------|-----------|-----------| | sbt Text | 1002 ms | 791 ms | ~ 7102 kB | | sbt Binary | 654 ms | 277 ms | ~ 6182 kB | | ConsistentBinary | 157 ms | 100 ms | 3097 kB | Since Zinc Analysis is internal to sbt, sbt 1.10.0 will enable this format by default. The following setting can be used to opt-out: ```scala Global / enableConsistentCompileAnalysis := false ``` This was contributed by Stefan Zeiger at Databricks in [zinc#1326][zinc1326]. #### New CommandProgress API sbt 1.10.0 adds a new CommandProgress API. This was contributed by Iulian Dragos at Gradle Inc in [#​7350][7350]. #### Other updates - Updates to JLine 3.24.1 and JAnsi 2.4.1 by [@​hvesalai][@​hvesalai]/[@​mazugrin][@​mazugrin] in [#​7419][7419]/[#​7545][7545] - Supports cross-build for external project ref by [@​RustedBones][@​RustedBones] in [#​7389][7389] - Avoids deprecated `java.net.URL` constructor by [@​xuwei-k][@​xuwei-k] in [#​7398][7398] - Fixes bug of unmanagedResourceDirectories by [@​minkyu97][@​minkyu97] in [#​7178][7178] - Fixes `updateSbtClassifiers` task by [@​azdrojowa123][@​azdrojowa123] in [#​7437][7437] - Fixes `packageSrc` to include `managedSources` by [@​Friendseeker][@​Friendseeker] in [#​7470][7470] - Fixes publishing to use the publisher specified using the `publisher` setting by [@​Tammo0987][@​Tammo0987] in [#​7475][7475] - Fixes eviction warning message by avoid repeating versions by [@​rtyley][@​rtyley] in [lm#433][lm433] - BSP: Implements `buildTarget/javacOptions` by [@​adpi2][@​adpi2] in [#​7352][7352] - BSP: Adds `noOp` field in the compile report by [@​adpi2][@​adpi2] in [#​7496][7496] ### [`v1.9.9`](https://redirect.github.com/sbt/sbt/releases/tag/v1.9.9): 1.9.9 [Compare Source](https://redirect.github.com/sbt/sbt/compare/v1.9.8...v1.9.9) #### Bug fixes - To fix `console` task on Scala 2.13.13, sbt 1.9.9 backports updates to JLine 3.24.1 and JAnsi 2.4.0 by [@​hvesalai](https://redirect.github.com/hvesalai) in [https://github.com/sbt/sbt/pull/7503](https://redirect.github.com/sbt/sbt/pull/7503) / [https://github.com/sbt/sbt/issues/7502](https://redirect.github.com/sbt/sbt/issues/7502) - To fix sbt 1.9.8's `UnsatisfiedLinkError` with `stat`, sbt 1.9.9 removes native code that was used to get the millisecond-precision timestamp that was broken ([JDK-8177809](https://bugs.openjdk.org/browse/JDK-8177809)) on JDK 8 prior to [OpenJDK 8u302](https://mail.openjdk.org/pipermail/jdk8u-dev/2021-July/014118.html) by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/io/pull/367](https://redirect.github.com/sbt/io/pull/367) **Full Changelog**: https://github.com/sbt/sbt/compare/v1.9.8...v1.9.9 ### [`v1.9.8`](https://redirect.github.com/sbt/sbt/releases/tag/v1.9.8): 1.9.8 [Compare Source](https://redirect.github.com/sbt/sbt/compare/v1.9.7...v1.9.8) #### updates - Fixes `IO.getModifiedOrZero` on Alpine etc, by using clib `stat()` instead of non-standard `__xstat64` abi by [@​bratkartoffel](https://redirect.github.com/bratkartoffel) in [https://github.com/sbt/io/pull/362](https://redirect.github.com/sbt/io/pull/362) - As a temporary fix for JLine issue, this disables vi-style effects inside emacs by [@​hvesalai](https://redirect.github.com/hvesalai) in [https://github.com/sbt/sbt/pull/7420](https://redirect.github.com/sbt/sbt/pull/7420) - Backports fix for `updateSbtClassifiers` not downloading sources [https://github.com/sbt/sbt/pull/7437](https://redirect.github.com/sbt/sbt/pull/7437) by [@​azdrojowa123](https://redirect.github.com/azdrojowa123) - Backports missing logger methods that take Java Supplier [https://github.com/sbt/sbt/pull/7447](https://redirect.github.com/sbt/sbt/pull/7447) by [@​mkurz](https://redirect.github.com/mkurz) **Full Changelog**: https://github.com/sbt/sbt/compare/v1.9.7...v1.9.8 ### [`v1.9.7`](https://redirect.github.com/sbt/sbt/releases/tag/v1.9.7): 1.9.7 [Compare Source](https://redirect.github.com/sbt/sbt/compare/v1.9.6...v1.9.7) ##### Highlights - sbt 1.9.7 updates its IO module to 1.9.7, which fixes parent path traversal vulnerability in `IO.unzip`. This was discovered and reported by Kenji Yoshida ([@​xuwei-k][@​xuwei-k]), and fixed by [@​eed3si9n][@​eed3si9n] in [io#360][io360]. ##### Zip Slip (arbitrary file write) vulnerability See for the most up to date information. This affects all sbt versions prior to 1.9.7. Path traversal vulnerabilty was discovered in `IO.unzip` code. This is a very common vulnerability known as [Zip Slip](https://security.snyk.io/research/zip-slip-vulnerability), and was found and fixed in plexus-archiver, Ant, etc. Given a specially crafted zip or JAR file, `IO.unzip` allows writing of arbitrary file. The follow is an example of a malicious entry: +2018-04-15 22:04:42 ..... 20 20 ../../../../../../root/.ssh/authorized_keys When executed on some path with six levels, `IO.unzip` could then overwrite a file under `/root/`. sbt main uses `IO.unzip` only in `pullRemoteCache` and `Resolvers.remote`, however, many projects use `IO.unzip(...)` directly to implement custom tasks and tests. ##### Non-determinism from AutoPlugins loading We've known that occasionally some builds non-deterministically flip-flops its behavior when a task or a setting is set by two independent AutoPlugins, i.e. two plugins that neither depends on the other. sbt 1.9.7 attempts to fix non-determinism of plugin loading order. This was contributed by [@​eed3si9n][@​eed3si9n] in [#​7404][7404]. ##### Other updates and fixes - Updates Coursier to 2.1.7 by [@​regiskuckaertz][@​regiskuckaertz] in [#​7392][7392] - Updates Swoval to 2.1.12 by [@​eatkins][@​eatkins] in [io#353][io353]. - Fixes `.sbtopts` support for `sbt` runner script on Windows by [@​ptrdom][@​ptrdom] in [#​7393][7393] - Adds documentation on `scriptedSbt` key by [@​mdedetrich][@​mdedetrich] in [#​7383][7383] - Includes the URL in `dependencyBrowseTree` log by [@​mkurz][@​mkurz] in [#​7396][7396] [@​eed3si9n]: https://redirect.github.com/eed3si9n [@​Nirvikalpa108]: https://redirect.github.com/Nirvikalpa108 [@​adpi2]: https://redirect.github.com/adpi2 [@​er1c]: https://redirect.github.com/er1c [@​eatkins]: https://redirect.github.com/eatkins [@​dwijnand]: https://redirect.github.com/dwijnand [@​xuwei-k]: https://redirect.github.com/xuwei-k [@​regiskuckaertz]: https://redirect.github.com/regiskuckaertz [@​ptrdom]: https://redirect.github.com/ptrdom [@​mdedetrich]: https://redirect.github.com/mdedetrich [@​mkurz]: https://redirect.github.com/mkurz [7404]: https://redirect.github.com/sbt/sbt/pull/7404 [7392]: https://redirect.github.com/sbt/sbt/pull/7392 [7393]: https://redirect.github.com/sbt/sbt/pull/7393 [7396]: https://redirect.github.com/sbt/sbt/pull/7396 [7383]: https://redirect.github.com/sbt/sbt/pull/7383 [io353]: https://redirect.github.com/sbt/io/pull/353 [io360]: https://redirect.github.com/sbt/io/pull/360 ### [`v1.9.6`](https://redirect.github.com/sbt/sbt/releases/tag/v1.9.6): 1.9.6 [Compare Source](https://redirect.github.com/sbt/sbt/compare/v1.9.5...v1.9.6) #### bug fix - sbt 1.9.6 reverts "internal representation of class symbol names" change ([https://github.com/sbt/zinc/pull/1244](https://redirect.github.com/sbt/zinc/pull/1244)), which caused Scala compiler to generate wrong anonymous class name by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/zinc/pull/1256](https://redirect.github.com/sbt/zinc/pull/1256). See [https://github.com/scala/bug/issues/12868](https://redirect.github.com/scala/bug/issues/12868) for more details. **Full Changelog**: https://github.com/sbt/sbt/compare/v1.9.5...v1.9.6 ### [`v1.9.5`](https://redirect.github.com/sbt/sbt/releases/tag/v1.9.5): 1.9.5 [Compare Source](https://redirect.github.com/sbt/sbt/compare/v1.9.4...v1.9.5) **Update**: ⚠️ sbt 1.9.5 is broken, because it causes Scala compiler to generate wrong class names for anonymous class on lambda. While we investigate please refrain from publishing libraries with it. [https://github.com/scala/bug/issues/12868#issuecomment-1720848704](https://redirect.github.com/scala/bug/issues/12868#issuecomment-1720848704) #### highlights - Switches to pre-compiled compiler bridge for Scala 2.13.12+ [#​7374][7374] by [@​eed3si9n][@​eed3si9n] - Fixes NPE when just `-X` is passed to `scalacOptions` [zinc#1246][zinc1246] by [@​unkarjedy][@​unkarjedy] #### other updates - Fixes internal representation of class symbol names [zinc#1244][zinc1244] by [@​dwijnand][@​dwijnand] - Fixes `NumberFormatException` in `CrossVersionUtil.binaryScalaVersion` [lm#426][lm426] by [@​HelloKunal][@​HelloKunal] - Fixes `scripted` client/server instability on Windows [#​7087][7087] by [@​mdedetrich][@​mdedetrich] - Fixes `sbt` launcher script bug on Windows [#​7365][7365] by [@​JD557][@​JD557] - Fixes `help` command on oldshell [#​7358][7358] by [@​azdrojowa123][@​azdrojowa123] - Adds `allModuleReports` to `UpdateReport` [lm#428][lm428] by [@​mdedetrich][@​mdedetrich] - Handles javac warning messages [zinc#1228][zinc1228] by [@​Arthurm1][@​Arthurm1] - Enables inliner for Scala 2.13 compiler bridge [zinc#1247][zinc1247] by [@​mdedetrich][@​mdedetrich] #### new contributors - [@​azdrojowa123](https://redirect.github.com/azdrojowa123) made their first contribution in [https://github.com/sbt/sbt/pull/7358](https://redirect.github.com/sbt/sbt/pull/7358) - [@​JD557](https://redirect.github.com/JD557) made their first contribution in [https://github.com/sbt/sbt/pull/7367](https://redirect.github.com/sbt/sbt/pull/7367) **Full Changelog**: https://github.com/sbt/sbt/compare/v1.9.4...v1.9.5 [@​eed3si9n]: https://redirect.github.com/eed3si9n [@​Nirvikalpa108]: https://redirect.github.com/Nirvikalpa108 [@​adpi2]: https://redirect.github.com/adpi2 [@​er1c]: https://redirect.github.com/er1c [@​eatkins]: https://redirect.github.com/eatkins [@​dwijnand]: https://redirect.github.com/dwijnand [@​mdedetrich]: https://redirect.github.com/mdedetrich [@​JD557]: https://redirect.github.com/JD557 [@​azdrojowa123]: https://redirect.github.com/azdrojowa123 [@​HelloKunal]: https://redirect.github.com/HelloKunal [@​unkarjedy]: https://redirect.github.com/unkarjedy [@​Arthurm1]: https://redirect.github.com/Arthurm1 [7374]: https://redirect.github.com/sbt/sbt/pull/7374 [7087]: https://redirect.github.com/sbt/sbt/pull/7087 [7365]: https://redirect.github.com/sbt/sbt/issues/7365 [7358]: https://redirect.github.com/sbt/sbt/pull/7358 [zinc1246]: https://redirect.github.com/sbt/zinc/pull/1246 [zinc1244]: https://redirect.github.com/sbt/zinc/pull/1244 [zinc1228]: https://redirect.github.com/sbt/zinc/pull/1228 [zinc1247]: https://redirect.github.com/sbt/zinc/pull/1247 [lm426]: https://redirect.github.com/sbt/librarymanagement/pull/426 [lm428]: https://redirect.github.com/sbt/librarymanagement/pull/428 ### [`v1.9.4`](https://redirect.github.com/sbt/sbt/releases/tag/v1.9.4): 1.9.4 [Compare Source](https://redirect.github.com/sbt/sbt/compare/v1.9.3...v1.9.4) ##### CVE-2022-46751 [CVE-2022-46751](https://redirect.github.com/advisories/GHSA-2jc4-r94c-rp7h) is a security vulnerability discovered in Apache Ivy, but found also in Coursier. With coordination with Apache Foundation, Adrien Piquerez ([@​adpi2](https://redirect.github.com/adpi2)) from Scala Center backported the fix to both our Ivy 2.3 fork and Coursier. sbt 1.9.4 updates them to the fixed versions. #### Other updates - Fixes `sbt_script` lookup by replacing all spaces with `%20` (not only the first one) in the path. by [@​arturaz](https://redirect.github.com/arturaz) in [https://github.com/sbt/sbt/pull/7349](https://redirect.github.com/sbt/sbt/pull/7349) - Fixes [scala-debug-adapter#543](https://redirect.github.com/scala-debug-adapter/sbt/issues/543): Maintain order of internal deps by [@​adpi2](https://redirect.github.com/adpi2) in [https://github.com/sbt/sbt/pull/7347](https://redirect.github.com/sbt/sbt/pull/7347) - Removes `conscriptConfigs` task, not used and needed(?) anymore by [@​mkurz](https://redirect.github.com/mkurz) in [https://github.com/sbt/sbt/pull/7353](https://redirect.github.com/sbt/sbt/pull/7353) - Adds a Scala 3 seed to the `sbt new` menu by [@​SethTisue](https://redirect.github.com/SethTisue) in [https://github.com/sbt/sbt/pull/7354](https://redirect.github.com/sbt/sbt/pull/7354) #### new contributors - [@​arturaz](https://redirect.github.com/arturaz) made their first contribution in [https://github.com/sbt/sbt/pull/7349](https://redirect.github.com/sbt/sbt/pull/7349) **Full Changelog**: https://github.com/sbt/sbt/compare/v1.9.3...v1.9.4 ### [`v1.9.3`](https://redirect.github.com/sbt/sbt/releases/tag/v1.9.3): 1.9.3 [Compare Source](https://redirect.github.com/sbt/sbt/compare/v1.9.2...v1.9.3) ##### Actionable diagnostics (aka quickfix) Actionable diagnostics, or quickfix, is an area in Scala tooling that's been getting attention since Chris Kipp presented it in the March 2023 Tooling Summit. Chris has written the [roadmap][actionable] and sent [sbt/sbt#7242][7242] that kickstarted the effort, but now there's been steady progress in [Build Server Protocol][bsp527], [Dotty](https://redirect.github.com/lampepfl/dotty/issues/17337), [Scala 2.13](https://redirect.github.com/scala/scala/pull/10406/), IntelliJ, Zinc, etc. Metals 1.0.0, for example, is now capable of surfacing code actions as a quickfix. sbt 1.9.3 adds a new interface called `AnalysisCallback2` to relay code actions from the compiler(s) to Zinc's Analysis file. Future version of Scala 2.13.x (and hopefully Scala 3) will release with proper code actions, but as a demo I've implemented a code action for procedure syntax usages even on current Scala 2.13.11 with `-deprecation` flag. This was contributed by Eugene Yokota ([@​eed3si9n](https://redirect.github.com/eed3si9n)) in [zinc#1226][zinc1226]. Special thanks to [@​lrytz][@​lrytz] for identifying this issue in [zinc#1214](https://redirect.github.com/sbt/zinc/discussions/1214). #### other updates - Adds M1/M2/Aarch64 build of sbtn into the installer by [@​julienrf](https://redirect.github.com/julienrf) in [https://github.com/sbt/sbt/pull/7329](https://redirect.github.com/sbt/sbt/pull/7329) - Fixes scripted tests timing out after 5 minutes by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/sbt/pull/7336](https://redirect.github.com/sbt/sbt/pull/7336) **Full Changelog**: https://github.com/sbt/sbt/compare/v1.9.2...v1.9.3 [@​eed3si9n]: https://redirect.github.com/eed3si9n [@​Nirvikalpa108]: https://redirect.github.com/Nirvikalpa108 [@​adpi2]: https://redirect.github.com/adpi2 [@​er1c]: https://redirect.github.com/er1c [@​eatkins]: https://redirect.github.com/eatkins [@​dwijnand]: https://redirect.github.com/dwijnand [@​ckipp01]: https://redirect.github.com/ckipp01 [@​mdedetrich]: https://redirect.github.com/mdedetrich [@​xuwei-k]: https://redirect.github.com/xuwei-k [@​lrytz]: https://redirect.github.com/lrytz [7242]: https://redirect.github.com/sbt/sbt/pull/7242 [7251]: https://redirect.github.com/sbt/sbt/pull/7251 [zinc1186]: https://redirect.github.com/sbt/zinc/pull/1186 [zinc1226]: https://redirect.github.com/sbt/zinc/pull/1226 [bsp527]: https://redirect.github.com/build-server-protocol/build-server-protocol/pull/527 [actionable]: https://contributors.scala-lang.org/t/roadmap-for-actionable-diagnostics/6172/1 ### [`v1.9.2`](https://redirect.github.com/sbt/sbt/releases/tag/v1.9.2): 1.9.2 [Compare Source](https://redirect.github.com/sbt/sbt/compare/v1.9.1...v1.9.2) #### Fix - Let `++` fall back to a bincompat Scala version by [@​eed3si9n](https://redirect.github.com/eed3si9n) in [https://github.com/sbt/sbt/pull/7328](https://redirect.github.com/sbt/sbt/pull/7328) **Full Changelog**: https://github.com/sbt/sbt/compare/v1.9.1...v1.9.2 ### [`v1.9.1`](https://redirect.github.com/sbt/sbt/releases/tag/v1.9.1): 1.9.1 [Compare Source](https://redirect.github.com/sbt/sbt/compare/v1.9.0...v1.9.1) ##### Change to Scala CLA sbt 1.9.1 is the first release of sbt after changing to Scala CLA in [#​7306][7306] etc. A number of contributors to sbt voiced concerns about donating our work to Lightbend after 2022, and Lightbend, Scala Center, and I agreed on changing the contributor license agreement such that the copyright would tranfer to Scala Center, a non-profit organization. sbt and its subcompoments, including Zinc, will remain available under Apache v2 license. ##### Updates - Fixes "Repository for publishing is not specified" error even when `publish / skip` is set `true` by [@​adpi2][@​adpi2] in [#​7295][7295] - Fixes scripted test not working when `sbtPluginPublishLegacyMavenStyle := false` by [@​adpi2][@​adpi2] in [#​7286][7286] - Fixes copy-pasting to `sbt console` being slow by [@​andrzejressel][@​andrzejressel] in [#​7280][7280] - Fixes missing range in BSP Diagnostic by [@​adpi2][@​adpi2] in [#​7298][7298] - Fixes zip64 offset writing by [@​dwijnand][@​dwijnand] in [zinc#1206][zinc1206] - Fixes a typo in the description of `exportPipelining` key by [@​alexklibisz][@​alexklibisz] in [#​7291][7291] - `dependencyBrowseGraph` and `dependencyDot` render in color by [@​sideeffffect][@​sideeffffect] in [#​7301][7301]. This can be opted-out using `dependencyDotNodeColors` setting. - Adds softwaremill/tapir.g8 to `sbt new` default menu by [@​katlasik][@​katlasik] in [#​7300][7300] - Makes `sbt new` default menu extensible via `templateDescriptions` setting key and `templateRunLocal` input key by [@​eed3si9n][@​eed3si9n] in [#​7304][7304] - Adds Hedgehog Scala to default test framework by [@​kevin-lee][@​kevin-lee] in [#​7287][7287] - Updates `semanticdbVersion` to 4.7.8 by [@​ckipp01][@​ckipp01] in [#​7294][7294] - Updates JNA to 5.13.0 by [@​xuwei-k][@​xuwei-k] in [io#346][io346] - Updates Scala 2.13 for Zinc etc to 2.13.11 by [@​mkurz][@​mkurz] in [#​7279][7279] - Updates sbtn to 1.9.0 by [@​mkurz][@​mkurz] in [#​7290][7290] - Updates Scala Toolkit to 0.2.0 by [@​eed3si9n][@​eed3si9n] in [#​7318][7318] ##### Behind the scene - Adds `@tailrec` annotation by [@​xuwei-k][@​xuwei-k] in [zinc#1209][zinc1209] - Updates Scala versions in scripted tests by [@​xuwei-k][@​xuwei-k] in [#​7312][7312] - Many typo fixes by [@​xuwei-k][@​xuwei-k] in [#​7313][7313] - Fixes Scaladoc warnings by [@​xuwei-k][@​xuwei-k] in [#​7314][7314] - Typo fix in `DEVELOPING.md` by [@​dongxuwang][@​dongxuwang] in [#​7299][7299] - Avoids deprecated `java.net.URL` constructor by [@​xuwei-k][@​xuwei-k] in [#​7315][7315] - Refactors `filter` to `withFilter` where possible by [@​xuwei-k][@​xuwei-k] in [#​7317][7317] #### new contributors - [@​andrzejressel](https://redirect.github.com/andrzejressel) made their first contribution in [https://github.com/sbt/sbt/pull/7280](https://redirect.github.com/sbt/sbt/pull/7280) - [@​kevin-lee](https://redirect.github.com/kevin-lee) made their first contribution in [https://github.com/sbt/sbt/pull/7287](https://redirect.github.com/sbt/sbt/pull/7287) - [@​alexklibisz](https://redirect.github.com/alexklibisz) made their first contribution in [https://github.com/sbt/sbt/pull/7291](https://redirect.github.com/sbt/sbt/pull/7291) - [@​dongxuwang](https://redirect.github.com/dongxuwang) made their first contribution in [https://github.com/sbt/sbt/pull/7299](https://redirect.github.com/sbt/sbt/pull/7299) - [@​katlasik](https://redirect.github.com/katlasik) made their first contribution in [https://github.com/sbt/sbt/pull/7300](https://redirect.github.com/sbt/sbt/pull/7300) **Full Changelog**: https://github.com/sbt/sbt/compare/v1.9.0...v1.9.1 [@​eed3si9n]: https://redirect.github.com/eed3si9n [@​Nirvikalpa108]: https://redirect.github.com/Nirvikalpa108 [@​adpi2]: https://redirect.github.com/adpi2 [@​er1c]: https://redirect.github.com/er1c [@​eatkins]: https://redirect.github.com/eatkins [@​dwijnand]: https://redirect.github.com/dwijnand [@​ckipp01]: https://redirect.github.com/ckipp01 [@​mdedetrich]: https://redirect.github.com/mdedetrich [@​xuwei-k]: https://redirect.github.com/xuwei-k [@​julienrf]: https://redirect.github.com/julienrf [@​mkurz]: https://redirect.github.com/mkurz [@​andrzejressel]: https://redirect.github.com/andrzejressel [@​kevin-lee]: https://redirect.github.com/kevin-lee [@​alexklibisz]: https://redirect.github.com/alexklibisz [@​dongxuwang]: https://redirect.github.com/dongxuwang [@​katlasik]: https://redirect.github.com/katlasik [@​sideeffffect]: https://redirect.github.com/sideeffffect [7306]: https://redirect.github.com/sbt/sbt/pull/7306 [7279]: https://redirect.github.com/sbt/sbt/pull/7279 [7280]: https://redirect.github.com/sbt/sbt/pull/7280 [7287]: https://redirect.github.com/sbt/sbt/pull/7287 [7286]: https://redirect.github.com/sbt/sbt/pull/7286 [7290]: https://redirect.github.com/sbt/sbt/pull/7290 [7291]: https://redirect.github.com/sbt/sbt/pull/7291 [7294]: https://redirect.github.com/sbt/sbt/pull/7294 [7295]: https://redirect.github.com/sbt/sbt/pull/7295 [7298]: https://redirect.github.com/sbt/sbt/pull/7298 [7299]: https://redirect.github.com/sbt/sbt/pull/7299 [7300]: https://redirect.github.com/sbt/sbt/pull/7300 [7301]: https://redirect.github.com/sbt/sbt/pull/7301 [7304]: https://redirect.github.com/sbt/sbt/pull/7304 [7312]: https://redirect.github.com/sbt/sbt/pull/7312 [7313]: https://redirect.github.com/sbt/sbt/pull/7313 [7314]: https://redirect.github.com/sbt/sbt/pull/7314 [7315]: https://redirect.github.com/sbt/sbt/pull/7315 [7317]: https://redirect.github.com/sbt/sbt/pull/7317 [7318]: https://redirect.github.com/sbt/sbt/pull/7318 [io346]: https://redirect.github.com/sbt/io/pull/346 [zinc1206]: https://redirect.github.com/sbt/zinc/pull/1206 [zinc1209]: https://redirect.github.com/sbt/zinc/pull/1209 ### [`v1.9.0`](https://redirect.github.com/sbt/sbt/releases/tag/v1.9.0): 1.9.0 [Compare Source](https://redirect.github.com/sbt/sbt/compare/v1.8.3...v1.9.0) ##### Changes with compatibility implications - Deprecates `IntegrationTest` configuration. See below. - Updates underlying Coursier to 2.1.2 by [@​eed3si9n][@​eed3si9n]. ##### Deprecation of IntegrationTest configuration sbt 1.9.0 deprecates `IntegrationTest` configuration. ([RFC-3](https://eed3si9n.com/sbt-drop-custom-config/) proposes to deprecate general use of configuration axis beyond `Compile` and `Test`, and this is the first installment of the change.) The recommended migration path is to create a subproject named "integration", or "foo-integration" etc. ```scala lazy val integration = (project in file("integration")) .dependsOn(core) // your current subproject .settings( publish / skip := true, // test dependencies libraryDependencies += something % Test, ) ``` From the shell you can run: ```scala > integration/test ``` Assuming these are slow tests compared to the regular tests, I might not aggregate them at all from other subprojects, and maybe only run it on CI, but it's up to you. Why deprecate `IntegrationTest`? `IntegrationTest` was a demoware for the idea of custom configuration axis, and now that we are planning to deprecate the mechanism to simplify sbt, we wanted to stop advertising it. We won't remove it during sbt 1.x series, but deprecation signals the non-recommendation status. This was contributed by [@​eed3si9n][@​eed3si9n] and [@​mdedetrich][@​mdedetrich] in [lm#414][lm414]/[#​7261][7261]. ##### POM consistency of sbt plugin publishing sbt 1.9.0 publishes sbt plugin to Maven repository in a POM-consistent way. sbt has been publishing POM file of sbt plugins as `sbt-something-1.2.3.pom` even though the artifact URL is suffixed as `sbt-something_2.12_1.0`. This allowed "sbt-something" to be registered by Maven Central, allowing [search](https://central.sonatype.com/search?smo=true\&q=sbt-pgp). However, as more plugins moved to Maven Central, it was considered that keeping POM consisntency rule was more important, especially for corporate repositories to proxy them. sbt 1.9.0 will publish using both the conventional POM-inconsistent style and POM-consistent style so prior sbt releases can still consume the plugin. However, this can be opted-out using `sbtPluginPublishLegacyMavenStyle` setting. This fix was contributed by Adrien Piquerez ([@​adpi2][@​adpi2]) at Scala Center in [coursier#2633][coursier2633], [sbt#7096][7096] etc. Special thanks to William Narmontas ([@​ScalaWilliam][@​ScalaWilliam]) and Wudong Liu ([@​wudong][@​wudong]) whose experimental plugin [sbt-vspp](https://redirect.github.com/esbeetee/sbt-vspp) paved the way for this feature. ##### `sbt new`, a text-based adventure sbt 1.9.0 adds text-based menu when `sbt new` or `sbt init` is called without arguments: $ sbt -Dsbt.version=1.9.0-RC2 init .... Welcome to sbt new! Here are some templates to get started: a) scala/toolkit.local - Scala Toolkit (beta) by Scala Center and VirtusLab b) typelevel/toolkit.local - Toolkit to start building Typelevel apps c) sbt/cross-platform.local - A cross-JVM/JS/Native project d) scala/scala-seed.g8 - Scala 2 seed template e) playframework/play-scala-seed.g8 - A Play project in Scala f) playframework/play-java-seed.g8 - A Play project in Java g) scala-js/vite.g8 - A Scala.JS + Vite project i) holdenk/sparkProjectTemplate.g8 - A Scala Spark project m) spotify/scio.g8 - A Scio project n) disneystreaming/smithy4s.g8 - A Smithy4s project q) quit Select a template (default: a): Unlike Giter8, `.local` template creates `build.sbt` etc in the **current directory**, and reboots into an sbt session. This was contributed by Eugene Yokota ([@​eed3si9n][@​eed3si9n]) in [#​7228][7228]. ##### Actionable diagnostics steps sbt 1.9.0 adds `actions` to `Problem`, allowing the compiler to suggest code edits as part of the compiler warnings and errors in a structual manner. See [Roadmap for actionable diagnostics][actionable] for more details. The changes were contributed by [@​ckipp01][@​ckipp01] in [#​7242][7242] and [@​eed3si9n][@​eed3si9n] in [bsp#527][bsp527]/[#​7251][7251]/[zinc#1186][zinc1186] etc. ##### `releaseNotesURL` setting sbt 1.9.0 adds `releaseNotesURL` setting, which creates `info.releaseNotesUrl` property in the POM file. This will then be used by Scala Steward. See [ Add release notes URLs to your POMs](https://contributors.scala-lang.org/t/add-release-notes-urls-to-your-poms/6059/1) for details. This was contributed by Arman Bilge in [lm#410][lm410]. ##### Other updates - Updates Scala 2.13 cross build for Zinc to 2.13.10 to address [CVE-2022-36944](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-36944) by [@​rhuddleston][@​rhuddleston] - Updates underlying Scala to 2.12.18 for JDK 21-ea in [#​7271][7271] by [@​eed3si9n][@​eed3si9n]. - Fixes Zinc incremental compilation looping infinitely [zinc#1182][zinc1182] by [@​CarstonSchilds][@​CarstonSchilds] - Fixes `libraryDependencySchemes` not overriding `assumedVersionScheme` [lm#415][lm415] by [@​adriaanm][@​adriaanm] - Fixes spurious whitespace in the runner script by [@​keynmol][@​keynmol] in [#​7134][7134] - Makes `RunProfiler` available by [@​dragos][@​dragos] in [#​7215][7215] - Makes `publishLocal / skip` work by [@​mdedetrich][@​mdedetrich] in [#​7165][7165] - Fixes NullPointerError under `-Vdebug` by [@​som-snytt][@​som-snytt] in [zinc#1141][zinc1141] - Fixes Maven `settings.xml` properties expansion by [@​nrinaudo][@​nrinaudo] in [lm#413][lm413] - Adds `FileFilter.nothing` and `FileFilter.everything` by [@​mdedetrich][@​mdedetrich] in [io#340][io340] - Adds `Resolver.ApacheMavenSnapshotsRepo` by [@​mdedetrich][@​mdedetrich] - Avoids deprecated `java.net.URL` constructor by [@​xuwei-k][@​xuwei-k] in [io#341][io341] - Updates to Swoval 2.1.10 by [@​eatkins][@​eatkins] in [io#343][io343] - Updates to sbt-giter8-resolver 0.16.2 by [@​eed3si9n][@​eed3si9n] - Fixes dead lock between `LoggerContext` and `Terminal` by [@​adpi2][@​adpi2] in [#​7191][7191] - Notifies `ClassFileManager` from `IncOptions` in `Incremental.prune` by [@​lrytz] in [zinc1148][zinc1148] - Updates usage info for java-home in the runner script by [@​liang3zy22][@​liang3zy22] in [#​7171][7171] - Deprecates misspelled `Problem#diagnosticRelatedInforamation` by [@​ckipp01][@​ckipp01] in [#​7241][7241] - Adds built-in support for weaver-cats test framework [#​7263][7263] by [@​kubukoz][@​kubukoz] ##### Behind the scene - Replaces olafurpg/setup-scala with actions/setup-java by [@​mzuehlke][@​mzuehlke] in [#​7154][7154] - Uses `sonatypeOssRepos` instead of `sonatypeRepo` by [@​yoshinorin][@​yoshinorin] in [#​7227][7227] [@​eed3si9n]: https://redirect.github.com/eed3si9n [@​Nirvikalpa108]: https://redirect.github.com/Nirvikalpa108 [@​adpi2]: https://redirect.github.com/adpi2 [@​er1c]: https://redirect.github.com/er1c [@​eatkins]: https://redirect.github.com/eatkins [@​dwijnand]: https://redirect.github.com/dwijnand [@​ckipp01]: https://redirect.github.com/ckipp01 [@​mdedetrich]: https://redirect.github.com/mdedetrich [@​xuwei-k]: https://redirect.github.com/xuwei-k [@​nrinaudo]: https://redirect.github.com/nrinaudo [@​CarstonSchilds]: https://redirect.github.com/CarstonSchilds [@​som-snytt]: https://redirect.github.com/som-snytt [@​lrytz]: https://redirect.github.com/lrytz [@​dragos]: https://redirect.github.com/dragos [@​keynmol]: https://redirect.github.com/keynmol [@​mzuehlke]: https://redirect.github.com/mzuehlke [@​yoshinorin]: https://redirect.github.com/yoshinorin [@​liang3zy22]: https://redirect.github.com/liang3zy22 [@​adriaanm]: https://redirect.github.com/adriaanm [@​wudong]: https://redirect.github.com/wudong [@​ScalaWilliam]: https://redirect.github.com/ScalaWilliam [@​rhuddleston]: https://redirect.github.com/rhuddleston [@​kubukoz]: https://redirect.github.com/kubukoz [7096]: https://redirect.github.com/sbt/sbt/pull/7096 [7215]: ttps://github.com/sbt/sbt/pull/7215 [7191]: https://redirect.github.com/sbt/sbt/pull/7191 [7228]: https://redirect.github.com/sbt/sbt/pull/7228 [7134]: https://redirect.github.com/sbt/sbt/pull/7134 [7165]: https://redirect.github.com/sbt/sbt/pull/7165 [7154]: https://redirect.github.com/sbt/sbt/pull/7154 [7227]: https://redirect.github.com/sbt/sbt/pull/7227 [7171]: https://redirect.github.com/sbt/sbt/pull/7171 [7234]: https://redirect.github.com/sbt/sbt/pull/7234 [7241]: https://redirect.github.com/sbt/sbt/pull/7241 [7242]: https://redirect.github.com/sbt/sbt/pull/7242 [7251]: https://redirect.github.com/sbt/sbt/pull/7251 [7271]: https://redirect.github.com/sbt/sbt/pull/7271 [7261]: https://redirect.github.com/sbt/sbt/pull/7261 [7263]: https://redirect.github.com/sbt/sbt/pull/7263 [zinc1182]: https://redirect.github.com/sbt/zinc/pull/1182 [zinc1141]: https://redirect.github.com/sbt/zinc/pull/1141 [zinc1148]: https://redirect.github.com/sbt/zinc/pull/1148 [zinc1186]: https://redirect.github.com/sbt/zinc/pull/1186 [zinc1196]: https://redirect.github.com/sbt/zinc/pull/1196 [lm410]: https://redirect.github.com/sbt/librarymanagement/pull/410 [lm411]: https://redirect.github.com/sbt/librarymanagement/pull/411 [lm413]: https://redirect.github.com/sbt/librarymanagement/pull/413 [lm414]: https://redirect.github.com/sbt/librarymanagement/pull/414 [lm415]: https://redirect.github.com/sbt/librarymanagement/pull/415 [io340]: https://redirect.github.com/sbt/io/pull/340 [io341]: https://redirect.github.com/sbt/io/pull/341 [io343]: https://redirect.github.com/sbt/io/pull/343 [coursier2633]: https://redirect.github.com/coursier/coursier/pull/2633 [io344]: https://redirect.github.com/sbt/io/pull/344 [zinc1185]: https://redirect.github.com/sbt/zinc/pull/1185 [zinc1186]: https://redirect.github.com/sbt/zinc/pull/1186 [bsp527]: https://redirect.github.com/build-server-protocol/build-server-proto

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

This PR was generated by Mend Renovate. View the repository job log.