Skip to content

Update dependencies - #86

Closed
alexandru wants to merge 2 commits into
mainfrom
renovate/all-dependencies
Closed

alexandru wants to merge 2 commits into
mainfrom
renovate/all-dependencies

Conversation

@alexandru

Copy link
Copy Markdown
Member

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change Pending
com.github.sbt:sbt-pgp plugin patch 2.3.1 → 2.3.2
gradle (source) minor 9.6.1 → 9.7.0 9.7.1
org.scalameta:munit Test patch 1.3.4 → 1.3.5
org.xerial:sqlite-jdbc Test patch 3.53.2.0 → 3.53.2.1
renovatebot/github-action action minor v46.1.20 → v46.2.2 v46.2.4 (+1)
sbt/sbt major 1.12.14 → 2.0.6 2.0.7
org.junit:junit-bom (source) dependencies patch 6.1.2 → 6.1.3
com.oracle.database.jdbc:ojdbc11 (source) dependencies patch 23.26.2.0.0 → 23.26.3.0.0
com.mysql:mysql-connector-j (source) dependencies major 9.7.0 → 26.7.0
org.mariadb.jdbc:mariadb-java-client (source) dependencies patch 3.5.9 → 3.5.10
org.xerial:sqlite-jdbc dependencies patch 3.53.2.0 → 3.53.2.1
ch.qos.logback:logback-classic (source, changelog) dependencies minor 1.5.38 → 1.6.3
com.ncorti.ktfmt.gradle:com.ncorti.ktfmt.gradle.gradle.plugin dependencies minor 0.26.0 → 0.27.0

Release Notes

sbt/sbt-pgp (com.github.sbt:sbt-pgp)

v2.3.2: 2.3.2

Compare Source

sbt-pgp 2.3.2 is cross published to:

sbt Version Published
1.x ✅
2.x ✅

sbt 2.x migration

🐛 bug fix

behind the scenes

new contributors

Full Changelog: sbt/sbt-pgp@v2.3.1...v2.3.2

gradle/gradle (gradle)

v9.7.0: 9.7.0

Compare Source

The Gradle team is excited to announce Gradle 9.7.0.

Here are the highlights of this release:

  • Isolated Projects graduates to incubating
  • Broader Configuration Cache compatibility
  • More source locations in problem reports

Read the Release Notes

We would like to thank the following community members for their contributions to this release of Gradle:
Adam,
Aman Gautam,
Aman Kumar,
Anton Dubrouski,
Aurimas,
gbhavya07,
Josh Friend,
nicklauslittle-gov,
Pragati,
project516,
Qin Mi,
Ravi,
sk-reddy17,
Suvrat Acharya,
Yongshun Ye.

Upgrade instructions

Switch your build to use Gradle 9.7.0 by updating your wrapper:

./gradlew :wrapper --gradle-version=9.7.0 && ./gradlew :wrapper

See the Gradle 9.x upgrade guide to learn about deprecations, breaking changes and other considerations when upgrading.

For Java, Groovy, Kotlin and Android compatibility, see the full compatibility notes.

Reporting problems

If you find a problem with this release, please file a bug on GitHub Issues adhering to our issue guidelines.
If you're not sure you're encountering a bug, please use the forum.

We hope you will build happiness with Gradle, and we look forward to your feedback via Twitter or on GitHub.

scalameta/munit (org.scalameta:munit)

v1.3.5

Compare Source

sbt 2: switch from sbt 1

Bug fixes

Miscellaneous

Build and dependency updates

xerial/sqlite-jdbc (org.xerial:sqlite-jdbc)

v3.53.2.1

Compare Source

Changelog
🐛 Fixes

jdbc

  • map DATETIME column type to Types.TIMESTAMP (19ac6bb), closes #​1436
  • throw SQLException from createConnection on invalid URL (fe636b7)
  • escape resolved table name in getExportedKeys query (b8eca2a)
  • escape catalog and schema in foreign key metadata queries (ff4b847)
  • escape table type values in getTables metadata query (33eaa19)
  • escape table name in getColumns metadata query (a5149f8)

pool

  • reset connection before notifying listeners on close (57f6cfa), closes #​821

unscoped

  • fallback to isAlpineLinux when map_files contains no musl entries (7537528), closes #​1382
🔄️ Changes
🛠 Build

deps

  • bump org.graalvm.buildtools:native-maven-plugin (75f593a)
  • bump org.graalvm.sdk:nativeimage from 25.0.3 to 25.1.3 (ac69b1e)
  • bump org.graalvm.buildtools:native-maven-plugin (37988f4)
  • bump org.graalvm.buildtools:native-maven-plugin (aae577a)
  • bump actions/checkout from 6 to 7 (9761dfd)
  • bump org.graalvm.buildtools:native-maven-plugin (e21a3b4)

deps-dev

  • bump org.apache.maven.plugins:maven-help-plugin (dcf3ea2)
  • bump org.jreleaser:jreleaser-maven-plugin (02e2e53)
  • bump org.sonatype.central:central-publishing-maven-plugin (72b9a31)

unscoped

  • add missing configuration for msvc (25b5de5)
  • central publishing wait only until validated (7018821)
  • switch to a maintained fork of setup-msvc-dev (3ca5e70)
  • fix older graalvm on windows (bb1382c)
Contributors

We'd like to thank the following people for their contributions:
Gauthier, Gauthier Roebroeck, Javid Khan, Kamil Krzywanski, Kilo Code Bot, dxbjavid

renovatebot/github-action (renovatebot/github-action)

v46.2.2

Compare Source

Documentation
  • update references to renovatebot/github-action to v46.2.1 (7cb7826)
Miscellaneous Chores
  • deps: update dependency globals to v17.9.0 (fe8cd8f)
  • deps: update dependency lint-staged to v17.3.0 (0170d05)
  • deps: update dependency npm-run-all2 to v9.0.3 (28cc32f)
  • deps: update node.js to v24.19.0 (7871c30)
  • deps: update pnpm/action-setup action to v6.0.10 (d50b9ec)
Build System
  • deps: lock file maintenance (aff7566)
Continuous Integration
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.10.0 (06d3a61)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.11.0 (01f82e1)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.11.1 (cbdd6e6)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.11.3 (b198ad1)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.11.4 (08eadc2)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.11.6 (90ab0cf)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.11.8 (7450504)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.12.0 (7e359f7)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.13.1 (8a0db28)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.13.2 (aaca99e)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.13.3 (a0789b3)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.14.1 (3c34056)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.14.10 (e7b39a3)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.14.12 (043e499)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.14.3 (#​1069) (c2d39c0)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.14.5 (ed777cd)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.14.7 (670a1df)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.14.8 (b057f09)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.16.1 (7b73ff6)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.17.0 (28c55b1)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.17.1 (216aee1)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.7.4 (9d9a18a)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.8.0 (a339330)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.8.1 (f82ef19)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.9.2 (2a6f771)

v46.2.1

Compare Source

Documentation
  • update references to renovatebot/github-action to v46.2.0 (b48aa6c)
Miscellaneous Chores
  • deps: update dependency globals to v17.8.0 (3e46bd7)
  • deps: update dependency lint-staged to v17.2.0 (9c685f2)
  • deps: update node.js to v24.18.1 (f525256)
Build System
  • deps: lock file maintenance (3d8211a)
Continuous Integration
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.0.1 (d471d52)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.2.1 (5cb64df)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.2.2 (a6b5808)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.2.3 (ab4d1eb)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.3.0 (a427843)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.3.3 (2ac8329)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.4.0 (7665449)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.4.2 (0166c9f)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.4.3 (8662b55)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.4.5 (1e71262)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.4.6 (7bec40c)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.5.0 (d146e8b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.5.1 (ddd5dca)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.5.2 (0731dab)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.5.3 (700f3b5)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.6.0 (7edb80e)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.7.0 (127e8ef)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.7.1 (f7532d1)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v44.7.2 (0fcd35b)
  • deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.29.0 (#​1068) (581f6ac)
  • deps: update zizmorcore/zizmor-action action to v0.6.2 (e36e81c)

v46.2.0

Compare Source

Features
  • deps: Update ghcr.io/renovatebot/renovate Docker tag to v44 (#​1067) (efa6654)
Documentation
  • update references to renovatebot/github-action to v46.1.21 (66c62f6)
Miscellaneous Chores
  • deps: update dependency lint-staged to v17.1.1 (403000c)
  • deps: update dependency prettier to v3.9.6 (6787cf2)
  • deps: update dependency typescript-eslint to v8.65.0 (656e12f)
Continuous Integration
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.283.0 (560e916)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.284.0 (92c373e)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.284.1 (b0f9fee)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.285.0 (bfb9d5d)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.285.3 (91ba9dc)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.285.4 (e41061b)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.285.6 (e8a7a1c)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.285.7 (7a22a55)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.286.0 (7590e1e)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.286.1 (cae6616)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.287.0 (#​1066) (4f87158)

v46.1.21

Compare Source

Documentation
  • mention that GITHUB_TOKEN can be used (#​1064) (13e8ee8)
  • update references to actions/checkout to v6.1.0 (fab6a17)
  • update references to renovatebot/github-action to v46.1.20 (9296462)
Miscellaneous Chores
  • deps: update dependency lint-staged to v17.1.0 (f528fd4)
  • deps: update dependency semantic-release to v25.0.7 (8771fb6)
  • deps: update dependency semantic-release to v25.0.8 (9efb0fc)
  • deps: update dependency typescript-eslint to v8.64.0 (4eed979)
Build System
  • deps: lock file maintenance (6e7b049)
Continuous Integration
  • deps: update actions/checkout action to v6.1.0 (c4fc050)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.1 (9355a07)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.3 (91aae03)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.4 (be1b582)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.5 (1885f40)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.6 (99c53af)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.272.9 (3946100)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.273.0 (143ca70)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.274.0 (b25398a)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.275.0 (d84cbc1)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.275.1 (42a4757)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.275.2 (f53dbc7)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.277.0 (091f8fd)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.277.1 (c5ab157)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.278.2 (0ffec41)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.278.3 (9586883)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.278.4 (a571ddf)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.278.5 (b018556)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.279.0 (f5099e2)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.279.1 (0a6a7a9)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.0 (c97e3db)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.2 (b8f0962)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.3 (1194ce5)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.4 (2fbf14d)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.280.5 (9f45e34)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.281.0 (e1ffcae)
  • deps: update ghcr.io/renovatebot/renovate docker tag to v43.281.1 (8ebe465)
  • deps: update ghcr.io/zizmorcore/zizmor docker tag to v1.28.0 (#​1065) (05b68f0)
  • deps: update zizmorcore/zizmor-action action to v0.6.1 (344a7d4)
sbt/sbt (sbt/sbt)

v2.0.6: 2.0.6

Compare Source

⚠️ Remote code execution vulnerability fix

sbt team received a security report GHSA-m2pw-22cj-jq4v from @​arpitjain099 that when the serverConnectionType is set to Tcp, an attacker is able to execute arbitrary code remotely via the sbt server. sbt 1.12.15 and 2.0.6 fix this bug.

Builds with the default serverConnectionType are not affected.

In affected builds, we recommend removing the serverConnectionType setting, or upgrading to a patched version or later. In an affected build, the setting might look like this:

Global / serverConnectionType := ConnectionType.Tcp

The remediation was implemented by @​eed3si9n and @​anatoliykmetyuk.

🐛 bug fixes

🚀 updates

Full Changelog: sbt/sbt@v2.0.5...v2.0.6

v2.0.5: 2.0.5

Compare Source

changes with compatibility implications

  • fix: Changes the test ClassLoader to close by default, to fix AccessDeniedException by @​eed3si9n in #​9538. Set closeClassLoaders to false to opt out, or Test / fork := true to fork the tests that does not shutdown properly.

🐛 bug fixes

🚀 updates

Full Changelog: sbt/sbt@v2.0.4...v2.0.5

v2.0.4: 2.0.4

Compare Source

changes with compatibility implications

🐛 bug fixes

🐛 caching related bug fixes

🚀 updates

behind the scenes

Full Changelog: sbt/sbt@v2.0.3...v2.0.4

v2.0.3: 2.0.3

Compare Source

🐛 bug fixes

Full Changelog: sbt/sbt@v2.0.2...v2.0.3

v2.0.2: 2.0.2

Compare Source

🐛 bug fixes

updates

behind the scenes

Full Changelog: sbt/sbt@v2.0.1...v2.0.2

v2.0.1: 2.0.1

Compare Source

🐛 bug fixes

🚀 updates

behind the scenes

Full Changelog: sbt/sbt@v2.0.0...v2.0.1

v2.0.0: 2.0.0

Compare Source

See sbt 2.0 change summary.

Full Changelog: sbt/sbt@v1.12.12...v2.0.0

v1.13.0: 1.13.

✂ Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate.

Renovate Bot and others added 2 commits August 24, 2026 09:38
Co-authored-by: alexandru <alexandru@users.noreply.github.com>
@github-actions

Copy link
Copy Markdown
Contributor

make check-all now passes.

Summary

What I checked

  • Read AGENTS.md and both project guides (delayedqueue-scala/, delayedqueue-jvm/).
  • Inspected the Renovate diff: renovate.yaml action bump, build.sbt (munit, sqlite-jdbc), gradle/libs.versions.toml (ktfmt, logback, sqlite, mariadb, mysql, oracle, junit-bom), Gradle wrapper 9.6.1→9.7.0, sbt 1.12.14→2.0.6, and sbt-pgp 2.3.1→2.3.2.
  • Ran make check-all.

What broke
The sbt major upgrade (1.12.14 → 2.0.6) is incompatible with the project's plugins. sbt-sonatype has no release cross-published for final sbt 2.x (only _sbt2.0.0-M2_3), so org.xerial.sbt:sbt-sonatype_sbt2_3:3.12.2 could not be resolved and the sbt build failed to load.

What I fixed
Reverted project/build.properties from sbt.version=2.0.6 back to sbt.version=1.12.14. All other Renovate updates (including sbt-pgp 2.3.2, which is cross-published to sbt 1.x) were left intact. This is a dependency-maintenance-only change; no public API or binary compatibility was affected.

Result
make check-all passes: ./gradlew check succeeds (Gradle 9.7.0, including ktfmtCheck, tests, koverVerify, ABI checks), and ./sbt ci-test succeeds (publishes local Gradle deps, runs 93 tests on both Scala 2.13 and Scala 3, and scalafmtCheckAll passes).

New%20session%20-%202026-08-24T09%3A39%3A42.165Z
opencode session  |  github run

@alexandru alexandru closed this Aug 29, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant