Skip to content

Conversation

@scala-center-steward
Copy link
Contributor

About this PR

πŸ“¦ Updates org.scala-lang:scala-library from 2.12.20 to 2.12.21

πŸ“œ GitHub Release Notes - Version Diff

Usage

βœ… Please merge!

I'll automatically update this PR to resolve conflicts as long as you don't change it yourself.

If you'd like to skip this version, you can just close this PR. If you have any feedback, just mention me in the comments below.

Configure Scala Steward for your repository with a .scala-steward.conf file.

Have a fantastic day writing Scala!

βš™ Adjust future updates

Add this to your .scala-steward.conf file to ignore future updates of this dependency:

updates.ignore = [ { groupId = "org.scala-lang", artifactId = "scala-library" } ]

Or, add this to slow down future updates of this dependency:

dependencyOverrides = [{
  pullRequests = { frequency = "30 days" },
  dependency = { groupId = "org.scala-lang", artifactId = "scala-library" }
}]
labels: library-update, early-semver-patch, semver-spec-patch, commit-count:1

@github-actions
Copy link

github-actions bot commented Dec 12, 2025

Dependency Review

The following issues were found:
  • ❌ 5 vulnerable package(s)
  • βœ… 0 package(s) with incompatible licenses
  • βœ… 0 package(s) with invalid SPDX license definitions
  • βœ… 0 package(s) with unknown licenses.
See the Details below.

Vulnerabilities

sbt-plugin/build.sbt

NameVersionVulnerabilitySeverity
com.squareup.okhttp3:okhttp3.14.2Square OkHttp can accept the wrong certificatehigh
com.squareup.okio:okio1.17.2Okio Signed to Unsigned Conversion Error vulnerabilitymoderate
org.apache.logging.log4j:log4j-core2.17.0Improper Input Validation and Injection in Apache Log4j2moderate
org.scala-sbt:io_2.121.5.1sbt vulnerable to arbitrary file write via archive extraction (Zip Slip)low
org.scala-sbt:sbt1.5.8sbt vulnerable to arbitrary file write via archive extraction (Zip Slip)low

Scanned Manifest Files

sbt-plugin/build.sbt

@tgodzik tgodzik merged commit 4a58b9b into main Dec 12, 2025
7 of 8 checks passed
@tgodzik tgodzik deleted the update/scala-library-2.12.21 branch December 12, 2025 17:04
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants