Skip to content

chore(deps): update all dependencies - #130

Open
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all
Open

chore(deps): update all dependencies#130
renovate[bot] wants to merge 1 commit into
mainfrom
renovate/all

Conversation

@renovate

@renovate renovate Bot commented May 26, 2026

Copy link
Copy Markdown
Contributor

This PR contains the following updates:

Package Type Update Change
actions/checkout action major v6v7
ch.qos.logback:logback-classic Runtime minor 1.5.321.6.3
com.eed3si9n:sbt-assembly plugin minor 2.3.12.4.1
com.github.sbt:sbt-ci-release plugin minor 1.11.21.12.0
com.timushev.sbt:sbt-updates plugin minor 0.6.40.7.0
com.typesafe:config patch 1.4.81.4.9
docker/build-push-action action minor v7.2.0v7.3.0
docker/login-action action minor v4.2.0v4.6.0
docker/metadata-action action minor v6.1.0v6.2.0
docker/setup-buildx-action action minor v4.1.0v4.2.0
io.cucumber:cucumber-junit patch 7.34.37.34.7
io.cucumber:cucumber-scala patch 8.39.18.39.7
io.gatling:gatling-jsonpath (source) patch 3.15.03.15.1
sbt/sbt major 1.12.112.0.6

Release Notes

actions/checkout (actions/checkout)

v7.0.1

Compare Source

v7.0.0

Compare Source

v7

Compare Source

sbt/sbt-assembly (com.eed3si9n:sbt-assembly)

v2.4.1: 2.4.1

Compare Source

🐛 bug fixes

Full Changelog: sbt/sbt-assembly@v2.4.0...v2.4.1

v2.4.0: 2.4.0

Compare Source

🐛 bug fixes

updates

sbt 2 migration

behind the scenes

new contributors

Full Changelog: sbt/sbt-assembly@v2.3.1...v2.4.0

sbt/sbt-ci-release (com.github.sbt:sbt-ci-release)

v1.12.0: 1.12.0

Compare Source

updates

behind the scenes

new contributors

Full Changelog: sbt/sbt-ci-release@v1.11.2...v1.12.0

rtimush/sbt-updates (com.timushev.sbt:sbt-updates)

v0.7.0

Compare Source

What's Changed

New Contributors

Full Changelog: rtimush/sbt-updates@0.6.4...0.7.0

lightbend/config (com.typesafe:config)

v1.4.9

Compare Source

What's Changed

New Contributors

Full Changelog: lightbend/config@v1.4.8...v1.4.9

docker/build-push-action (docker/build-push-action)

v7.3.0

Compare Source

docker/login-action (docker/login-action)

v4.6.0

Compare Source

v4.5.2

Compare Source

v4.5.1

Compare Source

v4.5.0

Compare Source

v4.4.0

Compare Source

v4.3.0

Compare Source

Full Changelog: docker/login-action@v4.2.0...v4.3.0

docker/metadata-action (docker/metadata-action)

v6.2.0

Compare Source

docker/setup-buildx-action (docker/setup-buildx-action)

v4.2.0

Compare Source

Full Changelog: docker/setup-buildx-action@v4.1.0...v4.2.0

cucumber/cucumber-jvm-scala (io.cucumber:cucumber-scala)

v8.39.7

Compare Source

Changed
  • [Core] Update cucumber-core dependency to 7.34.7
  • [Scala] Test against Jackson 2.22.2

v8.39.6

Compare Source

Changed
  • Internal CI changes

v8.39.5

Compare Source

Changed
  • Internal CI changes
  • [Scala] Test against Jackson 3.2.2

v8.39.4

Compare Source

Changed
  • Internal CI changes

v8.39.3

Compare Source

Changed
  • [Core] Update cucumber-core dependency to 7.34.6

v8.39.2

Compare Source

Changed
  • [Core] Update cucumber-core dependency to 7.34.5
  • [Scala] Test against Jackson 2.22.1 and 3.2.1
gatling/gatling (io.gatling:gatling-jsonpath)

v3.15.1

Compare Source

sbt/sbt (sbt/sbt)

v2.0.6: 2.0.6

Compare Source

Remote code execution vulnerability fix

sbt team received a security report GHSA-m2pw-22cj-jq4v from @​arpitjain099 that when the serverConnectionType is set to Tcp, an attacker is able to execute arbitrary code remotely via the sbt server. sbt 1.12.15 and 2.0.6 fix this bug.

We recommend removing the serverConnectionType setting, or upgrading to a patched version or later:

Global / serverConnectionType := ConnectionType.Tcp

The remediation was implemented by @​eed3si9n and @​anatoliykmetyuk.

🐛 bug fixes
🚀 updates

Full Changelog: sbt/sbt@v2.0.5...v2.0.6

v2.0.5: 2.0.5

Compare Source

changes with compatibility implications

  • fix: Changes the test ClassLoader to close by default, to fix AccessDeniedException by @​eed3si9n in #​9538. Set closeClassLoaders to false to opt out, or Test / fork := true to fork the tests that does not shutdown properly.

🐛 bug fixes

🚀 updates

Full Changelog: sbt/sbt@v2.0.4...v2.0.5

v2.0.4: 2.0.4

Compare Source

changes with compatibility implications
🐛 bug fixes
🐛 caching related bug fixes
🚀 updates
behind the scenes

Full Changelog: sbt/sbt@v2.0.3...v2.0.4

v2.0.3: 2.0.3

Compare Source

🐛 bug fixes

Full Changelog: sbt/sbt@v2.0.2...v2.0.3

v2.0.2: 2.0.2

Compare Source

🐛 bug fixes
updates
behind the scenes

Full Changelog: sbt/sbt@v2.0.1...v2.0.2

v2.0.1: 2.0.1

Compare Source

🐛 bug fixes
🚀 updates
behind the scenes

Full Changelog: sbt/sbt@v2.0.0...v2.0.1

v2.0.0: 2.0.0

Compare Source

See sbt 2.0 change summary.

Full Changelog: sbt/sbt@v1.12.12...v2.0.0

v1.12.15: 1.12.15

Compare Source

Remote code execution vulnerability fix

sbt team received a security report GHSA-m2pw-22cj-jq4v from @​arpitjain099 that when the serverConnectionType is set to Tcp, an attacker is able to execute arbitrary code remotely via the sbt server. sbt 1.12.15 and 2.0.6 fix this bug.

We recommend removing the serverConnectionType setting, or upgrading to a patched version or later:

Global / serverConnectionType := ConnectionType.Tcp

The remediation was implemented by @​eed3si9n and @​anatoliykmetyuk.

🐛 bug fixes
behind the scenes

Full Changelog: sbt/sbt@v1.12.14...v1.12.15

v1.12.14: 1.12.14

Compare Source

🐛 bug fixes

updates

behind the scenes

Full Changelog: sbt/sbt@v1.12.13...v1.12.14

v1.12.13: 1.12.13

Compare Source

🐛 bug fixes

Full Changelog: sbt/sbt@v1.12.12...v1.12.13

v1.12.12: 1.12.12

Compare Source

bug fixes

behind the scenes

Full Changelog: sbt/sbt@v1.12.11...v1.12.12


Configuration

📅 Schedule: (UTC)

  • Branch creation
    • Between 12:00 AM and 04:59 AM, Monday through Friday (* 0-4 * * 1-5)
  • Automerge
    • Between 06:00 AM and 09:59 AM, Monday through Friday (* 6-9 * * 1-5)

🚦 Automerge: Enabled.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@renovate
renovate Bot force-pushed the renovate/all branch from 484b07e to 5e8e370 Compare May 27, 2026 21:52
@renovate renovate Bot changed the title chore(deps): update dependency io.gatling:gatling-jsonpath to v3.15.1 chore(deps): update all dependencies May 27, 2026
@renovate
renovate Bot force-pushed the renovate/all branch 2 times, most recently from 126b425 to 694aded Compare July 30, 2026 00:12
@renovate
renovate Bot force-pushed the renovate/all branch 2 times, most recently from 29fbfa5 to 11954fd Compare August 7, 2026 16:11
@renovate
renovate Bot force-pushed the renovate/all branch 4 times, most recently from 20266f9 to 1200806 Compare August 17, 2026 03:07
Signed-off-by: renovate[bot] <29139614+renovate[bot]@users.noreply.github.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants