bugfix: Fix releasing sbt 2 #288

tgodzik · 2025-12-11T14:49:41Z

No description provided.

github-actions · 2025-12-11T14:52:36Z

Dependency Review

The following issues were found:

❌ 5 vulnerable package(s)
✅ 0 package(s) with incompatible licenses
✅ 0 package(s) with invalid SPDX license definitions
✅ 0 package(s) with unknown licenses.

See the Details below.

Vulnerabilities

sbt-plugin/build.sbt

Name	Version	Vulnerability	Severity
com.squareup.okhttp3:okhttp	3.14.2	Square OkHttp can accept the wrong certificate	high
com.squareup.okio:okio	1.17.2	Okio Signed to Unsigned Conversion Error vulnerability	moderate
org.apache.logging.log4j:log4j-core	2.17.0	Improper Input Validation and Injection in Apache Log4j2	moderate
org.scala-sbt:io_2.12	1.5.1	sbt vulnerable to arbitrary file write via archive extraction (Zip Slip)	low
org.scala-sbt:sbt	1.5.8	sbt vulnerable to arbitrary file write via archive extraction (Zip Slip)	low

Scanned Manifest Files

sbt-plugin/build.sbt

com.squareup.okhttp3:[email protected]
com.squareup.okio:[email protected]
org.apache.logging.log4j:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.fasterxml.jackson.core:[email protected]
com.fasterxml.jackson.core:[email protected]
com.fasterxml.jackson.core:[email protected]
com.fasterxml.jackson.dataformat:[email protected]
com.fasterxml.jackson.datatype:[email protected]
com.github.ben-manes.caffeine:[email protected]
com.github.mwiede:[email protected]
com.google.code.gson:[email protected]
com.google.errorprone:[email protected]
com.google.errorprone:[email protected]
com.jcraft:[email protected]
com.lmax:[email protected]
com.squareup.okhttp3:[email protected]
com.swoval:[email protected]
com.swoval:[email protected]
com.typesafe:[email protected]
com.typesafe:[email protected]
com.typesafe:[email protected]
com.typesafe:[email protected]
com.typesafe:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
io.get-coursier:[email protected]
jline:[email protected]
junit:[email protected]
net.java.dev.jna:[email protected]
net.java.dev.jna:[email protected]
net.java.dev.jna:[email protected]
net.java.dev.jna:[email protected]
net.openhft:[email protected]
net.openhft:[email protected]
nl.big-o:[email protected]
org.antlr:[email protected]
org.apache.logging.log4j:[email protected]
org.apache.logging.log4j:[email protected]
org.checkerframework:[email protected]
org.fusesource.jansi:[email protected]
org.fusesource.jansi:[email protected]
org.hamcrest:[email protected]
org.jetbrains:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jsoup:[email protected]
org.nibor.autolink:[email protected]
org.reactivestreams:[email protected]
org.reactivestreams:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-sbt.ipcsocket:[email protected]
org.scala-sbt.ipcsocket:[email protected]
org.scala-sbt.ivy:[email protected]
org.scala-sbt.ivy:[email protected]
org.scala-sbt.jline:[email protected]
org.scala-sbt.jline:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scalameta:[email protected]
org.scalameta:[email protected]
org.scalameta:[email protected]
org.scalameta:[email protected]
org.scalameta:[email protected]
org.scalameta:[email protected]
org.slf4j:[email protected]
org.slf4j:[email protected]
org.yaml:[email protected]
ua.co.k:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.eed3si9n:[email protected]
com.fasterxml.jackson.core:[email protected]
com.fasterxml.jackson.core:[email protected]
com.fasterxml.jackson.core:[email protected]
com.fasterxml.jackson.dataformat:[email protected]
com.fasterxml.jackson.datatype:[email protected]
com.github.ben-manes.caffeine:[email protected]
com.github.mwiede:[email protected]
com.google.code.gson:[email protected]
com.google.errorprone:[email protected]
com.google.errorprone:[email protected]
com.jcraft:[email protected]
com.lmax:[email protected]
com.squareup.okhttp3:[email protected]
com.squareup.okhttp3:[email protected]
com.squareup.okio:[email protected]
com.swoval:[email protected]
com.swoval:[email protected]
com.typesafe:[email protected]
com.typesafe:[email protected]
com.typesafe:[email protected]
com.typesafe:[email protected]
com.typesafe:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
com.vladsch.flexmark:[email protected]
io.get-coursier:[email protected]
jline:[email protected]
junit:[email protected]
net.java.dev.jna:[email protected]
net.java.dev.jna:[email protected]
net.java.dev.jna:[email protected]
net.java.dev.jna:[email protected]
net.openhft:[email protected]
net.openhft:[email protected]
nl.big-o:[email protected]
org.antlr:[email protected]
org.apache.logging.log4j:[email protected]
org.apache.logging.log4j:[email protected]
org.apache.logging.log4j:[email protected]
org.checkerframework:[email protected]
org.fusesource.jansi:[email protected]
org.fusesource.jansi:[email protected]
org.hamcrest:[email protected]
org.jetbrains:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jline:[email protected]
org.jsoup:[email protected]
org.nibor.autolink:[email protected]
org.reactivestreams:[email protected]
org.reactivestreams:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang.modules:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-lang:[email protected]
org.scala-sbt.ipcsocket:[email protected]
org.scala-sbt.ipcsocket:[email protected]
org.scala-sbt.ivy:[email protected]
org.scala-sbt.ivy:[email protected]
org.scala-sbt.jline:[email protected]
org.scala-sbt.jline:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scala-sbt:[email protected]
org.scalameta:[email protected]
org.scalameta:[email protected]
org.scalameta:[email protected]
org.scalameta:[email protected]
org.scalameta:[email protected]
org.scalameta:[email protected]
org.slf4j:[email protected]
org.slf4j:[email protected]
org.yaml:[email protected]
ua.co.k:[email protected]

mkurz · 2025-12-11T19:13:09Z

@tgodzik Can you please force push the v3 tag so it points to 768f9b6 - just like v3.2.0?
Reason is because we use scalacenter/sbt-dependency-submission@v3 in our workflows.

tgodzik force-pushed the fix-release branch from 173b2be to 73f78c2 Compare December 11, 2025 15:49

bugfix: Fix releasing sbt 2

8d0101c

tgodzik force-pushed the fix-release branch from 73f78c2 to 8d0101c Compare December 11, 2025 15:53

tgodzik merged commit 768f9b6 into main Dec 11, 2025
7 of 8 checks passed

tgodzik deleted the fix-release branch December 11, 2025 16:07

Provide feedback

Saved searches

Use saved searches to filter your results more quickly

Uh oh!

bugfix: Fix releasing sbt 2 #288

bugfix: Fix releasing sbt 2 #288

Uh oh!

tgodzik commented Dec 11, 2025

Uh oh!

github-actions bot commented Dec 11, 2025 •

edited

Loading

Uh oh!

Uh oh!

mkurz commented Dec 11, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

bugfix: Fix releasing sbt 2 #288

bugfix: Fix releasing sbt 2 #288

Uh oh!

Conversation

tgodzik commented Dec 11, 2025

Uh oh!

github-actions bot commented Dec 11, 2025 • edited Loading Uh oh! There was an error while loading. Please reload this page.

Uh oh!

Dependency Review

Vulnerabilities

sbt-plugin/build.sbt

Scanned Manifest Files

Uh oh!

Uh oh!

mkurz commented Dec 11, 2025

Uh oh!

Reviewers

Assignees

Labels

Projects

Milestone

Development

Uh oh!

3 participants

github-actions bot commented Dec 11, 2025 •

edited

Loading