Update dependency sbt/sbt to v1.13.0 by renovate[bot] · Pull Request #6 · tegonal/play-json-typedid

sbt team received a security report GHSA-m2pw-22cj-jq4v from @arpitjain099 that when the serverConnectionType is set to Tcp, an attacker is able to execute arbitrary code remotely via the sbt server. sbt 1.12.15 and 2.0.6 fix this bug.

We recommend removing the serverConnectionType setting, or upgrading to a patched version or later:

Global / serverConnectionType := ConnectionType.Tcp

The remediation was implemented by @eed3si9n and @anatoliykmetyuk.

🐛 bug fixes

bport: Fixes sbt runner parsing build.properties with whitespaces by @anatoliykmetyuk in #9374
bport: Fixes sbt runner support on OpenBSD by @eed3si9n in #9394

behind the scenes

Update to sbtn 2.0.0-731e6666
ci: Bump actions/setup-python from 6 to 7 by @dependabot[bot] in #9478

Full Changelog: sbt/sbt@v1.12.14...v1.12.15

`v1.12.14`: 1.12.14

Compare Source

🐛 bug fixes

fix: Backports the packager cache fix for CVE-2026-26032 by @raboof in sbt/ivy#57
deps: sjson-new 0.10.3, which transitively updates Jawn to 1.7.0 for GHSA-cc4v-rvgp-2pf3 and GHSA-w4cm-gvhj-cgw6 by @eed3si9n in #9460
fix: Fixes BSP dependency parsing by @anatoliykmetyuk in #9451
fix: Fixes JVM option capability in the launcher config by @anatoliykmetyuk in #9452
fix: Fixes sbt shutdownall by @eed3si9n in #9435

updates

sbtn 2.0.0-b4d628dd by @eed3si9n in #9443
deps: ipcsocket 1.8.0 by @eed3si9n in #9433

behind the scenes

Bump actions/checkout from 6 to 7 by @dependabot[bot] in #9367

Full Changelog: sbt/sbt@v1.12.13...v1.12.14

`v1.12.13`: 1.12.13

Compare Source

🐛 bug fixes

fix: Fixes file permissions by @eed3si9n + @xuwei-k in sbt/io#527 / #9350
fix: Fixes ArrayIndexOutOfBoundsException error when Unix domain socket is closed by @merlinorg in sbt/ipcsocket#77

Full Changelog: sbt/sbt@v1.12.12...v1.12.13

`v1.12.12`: 1.12.12

Compare Source

bug fixes

fix: Fixes console that references Java module classes on JDK 9+ by @BrianHotopp in #9327
fix: Fixes sbt --version to now show JDK warnings on JDK 25 by @bitloi in #8822
fix: Fixes stdout/stderr not displaying on sbtn by @BrianHotopp in #9265
fix: Ensure resources are copied atomically by @anatoliykmetyuk in #9196

behind the scenes

Update sbtn to 2.0.0-f0d2fae4 by @eed3si9n in #9334
test: Make custom-scala-org scripted test hermetic by @BrianHotopp in #9260
ci: Skip 2.13 modules from graph submission by @eed3si9n in #9328

Full Changelog: sbt/sbt@v1.12.11...v1.12.12

`v1.12.11`: 1.12.11

Compare Source

bug fix

fix: Rollback eviction error in Test by @eed3si9n in sbt/librarymanagement#600

Full Changelog: sbt/sbt@v1.12.10...v1.12.11

`v1.12.10`: 1.12.10

Compare Source

updates

deps: Update log4j to 2.25.4, which fixes CVE-2026-34477, CVE-2026-34478, CVE-2026-34479, CVE-2026-34480 by @dancewithheart in #9086
deps: Update Gigahorse to 0.9.4, which pulls in httpclient5 5.6.1 by @eed3si9n in #9125
deps: Update sbtn to 2.0.0-RC13 by @eed3si9n in #9139
Backport of eviction error in Test configuration by @zainab-ali in #9102

🐛 bug fixes

fix: Hide JDK warnings if JDK 26 or later by @xuwei-k in #9068
fix: Fixes managedScalaInstance false support by @eed3si9n in #9121

behind the scenes

ci: dependency-submission branch set to 1.12.x by @dancewithheart in #9088

new contributors

@dancewithheart made their first contribution in #9086

Full Changelog: sbt/sbt@v1.12.9...v1.12.10

`v1.12.9`: 1.12.9

Compare Source

Updates

fix: Prefer local ScalaModuleInfo over global config by @kitbellew in coursier/sbt-coursier#609

Full Changelog: sbt/sbt@v1.12.8...v1.12.9

`v1.12.8`: 1.12.8

Compare Source

updates

fix: Fixes the source dependency checkout directory by @eed3si9n in #8974

behind the scenes

fix: Fixes test format by @eed3si9n in #8969

Full Changelog: sbt/sbt@v1.12.7...v1.12.8

`v1.12.7`: 1.12.7

Compare Source

CVE-2026-32948 Source dependency feature (via crafted VCS URL) leading to arbitrary code execution on Windows

sbt 1.12.7 fixes CVE-2026-32948 (GHSA-x4ff-q6h8-v7gw). Recently @anatoliykmetyuk at Scala Center discovered a vulnerability in sbt's source dependency feature ProjectRef(...) and RootProject(...). The URL for the version control system allows branch specification via the URL fragment, which is passed to Windows cmd shell. A malicious user can craft an URL that allows arbitrary code execution.

Anatolii also provided a fix from a private fork 1ce945 and 3a474a. We recommend upgrading to sbt 1.12.7, especially if you're on Windows.

updates

Revert Coursier back to 2.12.24 (#8902) by @eed3si9n in #8918

Full Changelog: sbt/sbt@v1.12.6...v1.12.7

`v1.12.6`: 1.12.6

Compare Source

updates

deps: Update lm-coursier to 2.1.12 (Coursier 2.12.25-M24) by @majk-p in #8902
feat: Retry on HTTP 5xx during dependency resolution by @majk-p in coursier/sbt-coursier#601
deps: Update log4j to 2.25.3 by @eed3si9n in #8872
deps: Update semanticdbVersion in SemanticdbPlugin.scala by @xuwei-k in #8885

Full Changelog: sbt/sbt@v1.12.5...v1.12.6

`v1.12.5`: 1.12.5

Compare Source

updates

bport: sbt runner should fail on JDK < 17 for sbt 2.x by @eureka928 in #8825
bport: sbtn prints out the error if server fails to start by @eureka928 in #8816

🐛 bug fixes

bport: Fixes double quotes handling in JVM argfile by @BrianHotopp in #8765
bport: Fixes sbt runner comment handling in .sbtopts and .javaopts files by @eed3si9n in #8841
bport: Fixes sbt runner's sbtn detection by @fireXtract in #8810

Full Changelog: sbt/sbt@v1.12.4...v1.12.5

`v1.12.4`: 1.12.4

Compare Source

backport: Respect scalaOrganization in compiler bridge resolution by @tanishiking in #8799
backport: Fixes .jvmopts parse error on Windows Git Bash by reverting "Handle JVM parameters with spaces in dot files" by @eed3si9n in #8798

Full Changelog: sbt/sbt@v1.12.3...v1.12.4

`v1.12.3`: 1.12.3

Compare Source

updates

fix/bport: Restores Scala 2 reflect/compiler unification by @calm329 in #8707
fix/bport: Print warning about scala-reflect not found by @eed3si9n in #8733
fix/bport: Restore runner precedence over .sbtopts by @it-education-md in #8695
fix/bport: Handle JVM parameters with spaces in dot files by @Eruis2579 in #8730
fix/bport: Handle --script-version sbt 2.x project dirs by @Eruis2579 in #8715
fix/bport: Handle --version in sbt 2.x project dirs by @it-education-md in #8735
fix/bport: Require coreutils for RPM by @eed3si9n in #8712

Full Changelog: sbt/sbt@v1.12.2...v1.12.3

`v1.12.2`: 1.12.2

Compare Source

updates

Bump to sbtn 1.12.1 by @eed3si9n in #8684
Use JProcess for interactive forking, which improves terminal detection by @eed3si9n in #8678
fix: Handle paths with parentheses in sbt.bat on Windows by @Eruis2579 in #8682 / #8656

Full Changelog: sbt/sbt@v1.12.1...v1.12.2

`v1.12.1`: 1.12.1

Compare Source

bug fixes

fix: Fixes sbt --client new combination by @MkDev11 in #8512
fix: Fixes sbt new argument parsing on Windows by @MkDev11 in #8509
fix: Fixes sbtopts files priority in sbt runner script by @mohansinghi in #8520
fix: Fixes -X support on Windows batch runner by @GlobalStar117 in #8566
fix: Fixes missing project directory on --addPluginSbtFile command by @azdrojowa123 in #8583
fix: Invalidates update cache across commands when dependencies change by @calm329 in #8593
fix: Fixes scala-reflect not found problem when Scala 3.8.1 is used transitively by @eed3si9n in #8633

behind the scenes

ci: Upgrade launcher-package from sbt 0.13 to 1.x by @MkDev11 in #8493

Full Changelog: sbt/sbt@v1.12.0...v1.12.1

`v1.12.0`: 1.12.0

Compare Source

changes with compatibility implications

dependencyTree displays internal config, which includes Provided by @eed3si9n in #8359
Scaladoc now requires Compile / doc / compilers scoped to doc task

🚀 updates

Adds Scala 3.8 REPL support by @eed3si9n in #8349
Show warnings when scalaVersion is missing by @eed3si9n in #8432
deps: Update to Scala 2.12.21 by @xuwei-k in #8407
BSP: Returns build targets sources from buildTarget/dependencySources request by @azdrojowa123 in #8415
Adds JDK_JAVA_OPTIONS support in the sbt runner by @sideeffffect in #8413
Updates semanticdbVersion to 4.14.1 by @xuwei-k in #8342

🐛 bug fixes

fix: Parses *.sbt files with -Xsource:3 by @eed3si9n in #8368
fix: Manually construct the string "org.fusesource.jansi" to support sbt 0.13 on Windows by @vasilmkd in sbt/launcher#139
fix: Fixes Javadoc support on JDK 21 by @adpi2 in sbt/zinc#1622

behind the scenes

Allows scala3_library to be a JAR-less artifact for Scala 3.8 by @hamzaremmal in #8387
Update Scala 2.13 used for util cross building to 2.13.18 by @mkurz in #8395
deps: Zinc 1.12.0 by @eed3si9n in #8434
ci: Update checkout references to 1.12.x by @eed3si9n in #8355
ci: Bump coursier/cache-action from 6 to 7 by @dependabot[bot] in #8353
ci: Bump actions/checkout from 5 to 6 by @dependabot[bot] in #8384

new contributors

@danicheg made their first contribution in #8346
@hamzaremmal made their first contribution in #8387

Full Changelog: sbt/sbt@v1.11.7...v1.12.0

`v1.11.7`: 1.11.7

Compare Source

🚀 updates

Adds --sun-misc-unsafe-memory-access=allow and --enable-native-access=ALL-UNNAMED flags to suppress JDK 25 warnings by @eed3si9n in #8304
Backports JDK 25 JEP-512/JEP-445 Main run by @eed3si9n in #8303
fix: Fixes runMain task for JEP-512/JEP-445 Main by @xuwei-k in #8316
Adds ability to filter UpdateReport by configurations by @mdedetrich in sbt/librarymanagement#547

🐛 bug fixes

fix: Fixes sbt 0.13 launching by @eed3si9n in sbt/launcher#136

🎬 behind the scenes

ci: Bump actions/setup-python from 5 to 6 by @dependabot[bot] in #8273
deps: Updates sbt-giter8-resolver version by @xuwei-k in #8309
test: Fixes fallback-dependencies-inter-project test by @xuwei-k in #8319
test: Fixes run/daemon-exit test by @xuwei-k in #8320
test: Update test dependencies by @xuwei-k in #8317

Full Changelog: sbt/sbt@v1.11.6...v1.11.7

`v1.11.6`: 1.11.6

Compare Source

🚀 sbt launcher 1.5.0

Update launcher code base to to Scala 3.7.2 by @eed3si9n in sbt/launcher#126
refactor: Adds -Xsource:3 option by @xuwei-k in sbt/launcher#117
deps: Removes Apache Ivy dependency from launcher by @eed3si9n in sbt/launcher#127

🐛 bug fixes

fix: Fixes internal dependency classpath #8249 by @azdrojowa123 in #8257
fix: Fixes client-side run on JDK 8 by @eed3si9n in #8259

🎬 behind the scene

ci: FIxes building sbtn locally for Aarch64 / arm64 by @eed3si9n in #8258
ci: Bump actions/checkout from 4 to 5 by @dependabot[bot] in #8246

Full Changelog: sbt/sbt@v1.11.5...v1.11.6

`v1.11.5`: 1.11.5

Compare Source

changes with compatibility implications

sbtn is built using ubuntu-22.04 image, which will require similar Linux version with glibc 2.32 and above.

🚀 features and other updates

Adds Scala 3.8.0 support. See below
Adds Scala Nightly repository resolver. See below
Adds --jvm-client to the sbt runner script to launch JVM client. See below
Central Repository publishing: Shows validation errors if present by @unkarjedy in #8191
Central Repository publishing: Includes the root subproject name into the deployment by @jeanmarc in #8219
Reduces sbtn outputs by @eed3si9n in #8234

Scala Nightly repository

Scala Team now publishes nightlies to a dedicated Artifactory instance. sbt 1.11.5 adds a new resolver for this:

resolvers += Resolver.scalaNightlyRepository

ThisBuild / scalaVersion := "3.8.0-RC1-bin-20250823-712d5bc-NIGHTLY"
Compile / scalacOptions += "-language:experimental.captureChecking"

This was contributed by @hamzaremmal in sbt/librarymanagement#532

Scala 3.8.0 support

Scala 3.8.0 will in-source the Scala standard library (scala-library) instead of using one from Scala 2.13. sbt 1.11.5 relaxes the Coursier same-version enforcement to support Scala 3.8.0.

This was pair programmed by @hamzaremmal + @eed3si9n during Scala Days 2025 as #8226

`sbt --jvm-client`

sbt 1.11.5 runner script adds new --jvm-client flag to launch the JVM version of the thin client. The implementation is the Scala code which sbtn is based on. This will be useful on platforms or CPU architectures that we do not build sbtn.

This was contributed by @eed3si9n in #8232

🎬 behind the scene

ci: Uses sbt 1.11.4 by @eed3si9n in #8192
ci: Adds clean.yml by @eed3si9n in #8227
ci: Bump actions/setup-java from 4 to 5 by @dependabot[bot] in #8229
ci: Split server-test by @eed3si9n in #8233
deps: Bump to lm 1.11.5 by @eed3si9n in #8231

new contributors

@jeanmarc made their first contribution in #8219
@hamzaremmal made their first contribution in #8226

Full Changelog: sbt/sbt@v1.11.4...v1.11.5

`v1.11.4`: 1.11.4

Compare Source

Updates

fix: Fixes sbt plugin cross building by @eed3si9n in sbt/librarymanagement#528
fix: Fixes sonaUploadRequestTimeout by scoping globally by @eed3si9n in #8190

Full Changelog: sbt/sbt@v1.11.3...v1.11.4

`v1.11.3`: 1.11.3

Compare Source

updates

Adds sonaUploadRequestTimeout setting to configure the upload timeout when publishing to the Central Repo by @guizmaii in #8171
fix: Adds support for pluginCrossBuild/sbtBinaryVersion "1.3", which is used by IntelliJ Scala plugin (fixes #8166) by @unkarjedy in #8167
fix: Fixes the import order to satisfy SemanticDB by @inglor in #8162

new contributors

@inglor made their first contribution in #8162
@guizmaii made their first contribution in #8171

Full Changelog: sbt/sbt@v1.11.2...v1.11.3

`v1.11.2`: 1.11.2

Compare Source

updates

fix: Fixes intermittent NullPointerError in update task by reverting the use of WeakReferences by @mrdziuban in coursier/sbt-coursier#564
Adds Resolver.sonatypeCentralSnapshots, Resolver.sonatypeCentralRepo(...) and deprecates Resolver.sonatypeOssRepos(...), Opts.resolver.sonatypeOssReleases , Opts.resolver.sonatypeOssSnapshots, etc by @eed3si9n in sbt/librarymanagement#517 / #8156

Full Changelog: sbt/sbt@v1.11.1...v1.11.2

`v1.11.1`: 1.11.1

Compare Source

updates

fix: Fixes memory leak in update task by @mrdziuban in coursier/sbt-coursier#563
fix: Default sbtPluginPublishLegacyMavenStyle to false by @eed3si9n in #8148
fix: Adds sonaDeploymentName to excludeLintKeys by @rtyley in #8143

behind the scene

ci: Use Central Portal for publishing by @eed3si9n in #8147

Full Changelog: sbt/sbt@v1.11.0...v1.11.1

`v1.11.0`: 1.11.0

Compare Source

Central Repository publishing

The Central Repository (aka Maven Central) has long been the pillar of the JVM ecosystem including Scala. The mechanism to publish libraries to the Central has been hosted by Sonatype as OSS Repository Hosting (OSSRH) via HTTP PUT, but in March it was announced that the endpoint will be sunset in June 2025 in favor of the Central Portal at https://central.sonatype.com/.

sbt 1.11.0 implements a built-in support to publish to Central Repository via the Central Portal. To publish to the Central Portal, first set ThisBuild / publishTo setting to the localStaging repository:

ThisBuild / publishTo := {
  val centralSnapshots = "https://central.sonatype.com/repository/maven-snapshots/"
  if (isSnapshot.value) Some("central-snapshots" at centralSnapshots)
  else localStaging.value
}

Add credentials to the host central.sonatype.com using the generated user token user name and password. sbt 1.11.0 will read from the environment variables SONATYPE_USERNAME and SONATYPE_PASSWORD and append a credential for central.sonatype.com out-of-box, which might be useful for automatic publishing from the CI environment, such as GitHub Actions.

- run: sbt ci-release
  env:
    PGP_PASSPHRASE: ${{ secrets.PGP_PASSPHRASE }}
    PGP_SECRET: ${{ secrets.PGP_SECRET }}
    SONATYPE_PASSWORD: ${{ secrets.SONATYPE_PASSWORD }}
    SONATYPE_USERNAME: ${{ secrets.SONATYPE_USERNAME }}

When you're ready to publish, call publishSigned task (available via sbt-pgp). At this point, the JARs and POM files will be staged to your local target/sona-staging directory.

Next, call sonaUpload to upload to the Central Portal and manually release the bundle, or call sonaRelease to upload and automatically release to the Central Repository.

This was contributed by @eed3si9n in #8126. The feature was inspired by sbt-sonatype workflow pioneered by Taro Saito, and sonatype-central-client spearheaded by David Doyle at Lumidion.

Other updates

fix: Avoid printing "copying runtime jar" etc to stdout by @eed3si9n in #8081
fix: Fix incremental test (testQuick) with companion objects by @eed3si9n in #8087

Full Changelog: sbt/sbt@v1.10.11...v1.11.0

`v1.10.11`: 1.10.11

Compare Source

updates

Updates Coursier from 2.1.22 → 2.1.23 by @eed3si9n in #8069

🐛 bug fixes

fix: Fixes compile task retrying itself on compiler crashes by @eed3si9n in #8070
fix: sbt --client shutdown shortcuts if the server is not already running by @eed3si9n in #8057
fix: Fixes sbt --client on Windows by @eed3si9n in #8071
fix: Avoids creating target on sbt --version by @eed3si9n in #8066
fix: Fixes slash syntax keys in Scala 2.13 evolution message by @eed3si9n in #8067

Full Changelog: sbt/sbt@v1.10.10...v1.10.11

Configuration

📅 Schedule: (UTC)

Branch creation
- At any time (no schedule defined)
Automerge
- At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.10.11~~ Update dependency sbt/sbt to v1.11.0 May 24, 2025

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from 177c940 to 7d59ab1 Compare May 24, 2025 09:54

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from 7d59ab1 to e3b1284 Compare June 2, 2025 05:02

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.11.0~~ Update dependency sbt/sbt to v1.11.1 Jun 2, 2025

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.11.1~~ Update dependency sbt/sbt to v1.11.2 Jun 7, 2025

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from e3b1284 to a1e321e Compare June 7, 2025 22:02

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.11.2~~ Update dependency sbt/sbt to v1.11.3 Jul 6, 2025

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from a1e321e to 4c61674 Compare July 6, 2025 01:23

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.11.3~~ Update dependency sbt/sbt to v1.11.4 Aug 4, 2025

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from 4c61674 to 4933a89 Compare August 4, 2025 15:15

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.11.4~~ Update dependency sbt/sbt to v1.11.5 Aug 24, 2025

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from 4933a89 to 89353c3 Compare August 24, 2025 20:47

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.11.5~~ Update dependency sbt/sbt to v1.11.6 Sep 7, 2025

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from 89353c3 to 9ed9930 Compare September 7, 2025 01:25

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.11.6~~ Update dependency sbt/sbt to v1.11.7 Oct 5, 2025

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from 9ed9930 to 4086db9 Compare October 5, 2025 21:09

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from 4086db9 to 95f50ca Compare January 5, 2026 04:54

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.11.7~~ Update dependency sbt/sbt to v1.12.0 Jan 5, 2026

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.0~~ Update dependency sbt/sbt to v1.12.1 Jan 26, 2026

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from 95f50ca to 75ef5d9 Compare January 26, 2026 15:30

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.1~~ Update dependency sbt/sbt to v1.12.2 Feb 4, 2026

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from 75ef5d9 to bb435a4 Compare February 4, 2026 06:27

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from bb435a4 to 72683ec Compare February 15, 2026 01:45

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.2~~ Update dependency sbt/sbt to v1.12.3 Feb 15, 2026

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.3~~ Update dependency sbt/sbt to v1.12.4 Feb 23, 2026

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch 2 times, most recently from b4be8e4 to b7c94ce Compare March 2, 2026 00:38

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.4~~ Update dependency sbt/sbt to v1.12.5 Mar 2, 2026

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.5~~ Update dependency sbt/sbt to v1.12.6 Mar 16, 2026

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from b7c94ce to e63249e Compare March 16, 2026 04:42

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.6~~ Update dependency sbt/sbt to v1.12.7 Mar 24, 2026

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch 2 times, most recently from 4a56190 to d1dfee1 Compare March 25, 2026 04:53

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.7~~ Update dependency sbt/sbt to v1.12.8 Mar 25, 2026

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.8~~ Update dependency sbt/sbt to v1.12.9 Apr 7, 2026

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from d1dfee1 to 71acc86 Compare April 7, 2026 05:02

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.9~~ Update dependency sbt/sbt to v1.12.10 Apr 27, 2026

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from 71acc86 to 02223ba Compare April 27, 2026 08:32

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.10~~ Update dependency sbt/sbt to v1.12.11 May 3, 2026

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from 02223ba to 1ef9a9c Compare May 3, 2026 01:50

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from 1ef9a9c to 70c97bb Compare June 14, 2026 10:51

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.11~~ Update dependency sbt/sbt to v1.12.12 Jun 14, 2026

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from 70c97bb to b263d68 Compare June 22, 2026 01:02

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.12~~ Update dependency sbt/sbt to v1.12.13 Jun 22, 2026

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from b263d68 to f669be5 Compare July 18, 2026 04:08

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.13~~ Update dependency sbt/sbt to v1.12.14 Jul 18, 2026

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from f669be5 to dfcf2b0 Compare August 8, 2026 15:01

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.14~~ Update dependency sbt/sbt to v1.12.15 Aug 8, 2026

Update dependency sbt/sbt to v1.13.0

a6db382

renovate Bot force-pushed the renovate/sbt-sbt-1.x branch from dfcf2b0 to a6db382 Compare August 22, 2026 23:59

renovate Bot changed the title ~~Update dependency sbt/sbt to v1.12.15~~ Update dependency sbt/sbt to v1.13.0 Aug 22, 2026

Navigation Menu

Uh oh!

Update dependency sbt/sbt to v1.13.0 - #6

Update dependency sbt/sbt to v1.13.0#6
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/sbt-sbt-1.x

renovate Bot commented Mar 17, 2025 •

edited

Loading

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

0 participants

Uh oh!

Conversation

renovate Bot commented Mar 17, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Release Notes

v1.13.0: 1.13.0

🚀 updates

🐛 bug fixes

behind the scenes

new contributors

v1.12.15: 1.12.15

Remote code execution vulnerability fix

🐛 bug fixes

behind the scenes

v1.12.14: 1.12.14

🐛 bug fixes

updates

behind the scenes

v1.12.13: 1.12.13

🐛 bug fixes

v1.12.12: 1.12.12

bug fixes

behind the scenes

v1.12.11: 1.12.11

bug fix

v1.12.10: 1.12.10

updates

🐛 bug fixes

behind the scenes

new contributors

v1.12.9: 1.12.9

Updates

v1.12.8: 1.12.8

updates

behind the scenes

v1.12.7: 1.12.7

CVE-2026-32948 Source dependency feature (via crafted VCS URL) leading to arbitrary code execution on Windows

updates

v1.12.6: 1.12.6

updates

v1.12.5: 1.12.5

updates

🐛 bug fixes

v1.12.4: 1.12.4

v1.12.3: 1.12.3

updates

v1.12.2: 1.12.2

updates

v1.12.1: 1.12.1

bug fixes

behind the scenes

v1.12.0: 1.12.0

changes with compatibility implications

🚀 updates

🐛 bug fixes

behind the scenes

new contributors

v1.11.7: 1.11.7

🚀 updates

🐛 bug fixes

🎬 behind the scenes

v1.11.6: 1.11.6

🚀 sbt launcher 1.5.0

🐛 bug fixes

🎬 behind the scene

v1.11.5: 1.11.5

changes with compatibility implications

🚀 features and other updates

Scala Nightly repository

Scala 3.8.0 support

sbt --jvm-client

🎬 behind the scene

new contributors

v1.11.4: 1.11.4

Updates

v1.11.3: 1.11.3

updates

new contributors

v1.11.2: 1.11.2

updates

renovate Bot commented Mar 17, 2025 •

edited

Loading

`v1.13.0`: 1.13.0

`v1.12.15`: 1.12.15

`v1.12.14`: 1.12.14

`v1.12.13`: 1.12.13

`v1.12.12`: 1.12.12

`v1.12.11`: 1.12.11

`v1.12.10`: 1.12.10

`v1.12.9`: 1.12.9

`v1.12.8`: 1.12.8

`v1.12.7`: 1.12.7

`v1.12.6`: 1.12.6

`v1.12.5`: 1.12.5

`v1.12.4`: 1.12.4

`v1.12.3`: 1.12.3

`v1.12.2`: 1.12.2

`v1.12.1`: 1.12.1

`v1.12.0`: 1.12.0

`v1.11.7`: 1.11.7

`v1.11.6`: 1.11.6

`v1.11.5`: 1.11.5

`sbt --jvm-client`

`v1.11.4`: 1.11.4

`v1.11.3`: 1.11.3

`v1.11.2`: 1.11.2

`v1.11.1`: 1.11.1

`v1.11.0`: 1.11.0

`v1.10.11`: 1.10.11