Skip to content

Update dependency org.playframework:sbt-plugin to v3.0.11 - #5

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/org.playframework-sbt-plugin-3.x
Open

Update dependency org.playframework:sbt-plugin to v3.0.11#5
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/org.playframework-sbt-plugin-3.x

Conversation

@renovate

@renovate renovate Bot commented Mar 14, 2025

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
org.playframework:sbt-plugin plugin patch 3.0.63.0.11

Release Notes

playframework/playframework (org.playframework:sbt-plugin)

v3.0.11: Play 3.0.11

Compare Source

The Play Team is delighted to announce the release of Play 3.0.11! 🎉

📗 About this Release

This release fixes several bugs and addresses reported security vulnerabilities (CVEs) in play-ws and - as always - updates dependencies. We strongly recommend upgrading at your earliest convenience.

If you're considering upgrading to Play 3.0, please check the Play 3.0 release announcement for highlights and further details on how to migrate. Many projects have already smoothly upgraded to Play 3.0.

Noteworthy Pull Request

Following pull requests got merged for this release:

For more details see the full list of changes and the 3.0.11 milestone.

❤️ Thanks to our premium sponsors!

If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor.
You can also individually sponsor the project by becoming a backer.

🙇 Thanks to our contributors

Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors.
Special thanks to all code contributors who helped with this particular release (they are listed below)!

v3.0.10: Play 3.0.10

Compare Source

We are pleased to announce the release of Play 3.0.10! 🎉

📗 About this Release

This release fixes several bugs and addresses reported security vulnerabilities (CVEs) and - as always - updates dependencies. We strongly recommend upgrading at your earliest convenience.

If you're considering upgrading to Play 3.0, please check the Play 3.0 release announcement for highlights and further details on how to migrate. Many projects have already smoothly upgraded to Play 3.0.

Noteworthy Pull Request
  • playframework/play-json#1228 [3.0.x] Avoid running out of memory when parsing heavily nested arrays or objects by @​mkurz
    We now limit the maximum allowed nesting depth of JSON structures (arrays, objects, or a mix of both) to 1000.
    This limit can be adjusted using the system property play.json.parser.maxNestingDepth.
    We assume a depth of 1000 should be more than sufficient for virtually all real-world use cases.
    This change helps prevent both potential OutOfMemoryErrors and StackOverflowErrors.
    The latter, however, is not a concern for Play JSON, since it already uses a @​tailrec-optimized parsing method.
    As a result, Play JSON is not affected by GHSA-h46c-h94j-95f3, which specifically addresses StackOverflowError risks.
    This improvement is simply an additional safety measure.
  • #​13684 [3.0.x] Bump to lz4-java 1.10.1 to fix CVE-2025-66566 and CVE‐2025‐12183 by @​mkurz
  • #​13706 [3.0.x] Netty 4.1.130.Final to fix CVE-2025-67735 by @​mkurz
  • Upgrade ch.qos.logback:logback-core to fix CVE-2025-11226 (see "Patch updates" below)

Following pull requests got merged for this release:

For more details see the full list of changes and the 3.0.10 milestone.

❤️ Thanks to our premium sponsors!

If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor.
You can also individually sponsor the project by becoming a backer.

🙇 Thanks to our contributors

Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors.
Special thanks to all code contributors who helped with this particular release (they are listed below)!

v3.0.9: Play 3.0.9

Compare Source

The Play Team is happy to announce the release of Play 3.0.9! 🎉

📗 About this Release

This patch release upgrades dependencies, fixes minor bugs, comes with support for Java 25 and improves compatibility with Scala 3. We recommend upgrading as soon as possible.

If you're considering upgrading to Play 3.0, please check the Play 3.0 release announcement for highlights and further details on how to migrate. Many projects have already smoothly upgraded to Play 3.0.

Official support for Java 25

Starting with this release, Play officially supports Java 25. Since all tests passed when running on the latest Java 25 release candidate, we are comfortable declaring Java 25 officially supported by Play.

Noteworthy Pull Requests

Full Changelog

Following pull requests got merged for this release:

For more details see the full list of changes and the 3.0.9 milestone.

❤️ Thanks to our premium sponsors!

If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor.
You can also individually sponsor the project by becoming a backer.

🙇 Thanks to our contributors

Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors.
Special thanks to all code contributors who helped with this particular release (they are listed below)!

v3.0.8: Play 3.0.8

Compare Source

The Play Team is happy to announce the release of Play 3.0.8! 🥳

📗 About this Release

This release fixes several bugs and a CVE, improves Scala 3 support, and - as always - updates dependencies. We strongly recommend upgrading at your earliest convenience.

If you're considering upgrading to Play 3.0, please check the Play 3.0 release announcement for highlights and further details on how to migrate. Many projects have already smoothly upgraded to Play 3.0.

sbt 1.9.0 or newer is now required

Because of recent changes in how artifacts are published to Maven Central, older sbt versions can no longer retrieve Play's sbt plugins published starting July 1, 2025. If you're still using an older sbt release, you'll need to upgrade to sbt 1.9.0 or newer to continue fetching Play artifacts from Maven Central. Play 3.0.8 and newer will not work with earlier sbt versions. To be fair, when releasing Play 3.0, we already announced 1.9.0 as the minimum required sbt version, even though older versions may still have worked until now.

Scala 3 improvements
  • Twirl now supports using in it's templates, so you can define template parameters like:

    @​(x: Int)(using y: Int)

    Thanks to @​ajafri2001 for implementing this improvement 🙌:
    playframework/twirl#933 Prepend "using" at the callsite when definition site has implicit parameter

  • When using Play JSON, the JSON field ordering is now correctly preserved when compiling with Scala 3 - implemented by @​xuwei-k:
    playframework/play-json#1177 fix field ordering Scala 3 writes macro

Noteworthy Pull Requests

Full Changelog

Following pull requests got merged for this release:

For more details see the full list of changes and the 3.0.8 milestone.

❤️ Thanks to our premium sponsors!

If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor.
You can also individually sponsor the project by becoming a backer.

🙇 Thanks to our contributors

Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors.
Special thanks to all code contributors who helped with this particular release (they are listed below)!

v3.0.7: Play 3.0.7

Compare Source

The Play Team is happy to announce the release of Play 3.0.7.

📗 About this Release

This patch release primarily upgrades dependencies, fixes minor bugs, and improves compatibility with Scala 3. We recommend upgrading as soon as possible.

If you're considering upgrading to Play 3.0, please check the Play 3.0 release announcement for highlights and further details on how to migrate. Many projects have already smoothly upgraded to Play 3.0.

Noteworthy Pull Request

Full Changelog

Following pull requests got merged for this release:

Note

PR body was truncated to here.


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • At any time (no schedule defined)
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/org.playframework-sbt-plugin-3.x branch from d59545c to e5993fe Compare June 30, 2025 23:43
@renovate renovate Bot changed the title Update dependency org.playframework:sbt-plugin to v3.0.7 Update dependency org.playframework:sbt-plugin to v3.0.8 Jun 30, 2025
@renovate
renovate Bot force-pushed the renovate/org.playframework-sbt-plugin-3.x branch from e5993fe to 462613f Compare September 11, 2025 13:47
@renovate renovate Bot changed the title Update dependency org.playframework:sbt-plugin to v3.0.8 Update dependency org.playframework:sbt-plugin to v3.0.9 Sep 11, 2025
@renovate
renovate Bot force-pushed the renovate/org.playframework-sbt-plugin-3.x branch from 462613f to 4856750 Compare December 22, 2025 02:35
@renovate renovate Bot changed the title Update dependency org.playframework:sbt-plugin to v3.0.9 Update dependency org.playframework:sbt-plugin to v3.0.10 Dec 22, 2025
@renovate
renovate Bot force-pushed the renovate/org.playframework-sbt-plugin-3.x branch from 4856750 to 69db8e7 Compare May 21, 2026 07:48
@renovate renovate Bot changed the title Update dependency org.playframework:sbt-plugin to v3.0.10 Update dependency org.playframework:sbt-plugin to v3.0.11 May 21, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants