Skip to content

chore(deps, amber): update sbt patch updates - #7730

Open
renovate-bot wants to merge 1 commit into
apache:mainfrom
renovate-bot:renovate/sbt-patch-updates
Open

chore(deps, amber): update sbt patch updates#7730
renovate-bot wants to merge 1 commit into
apache:mainfrom
renovate-bot:renovate/sbt-patch-updates

Conversation

@renovate-bot

@renovate-bot renovate-bot commented Aug 17, 2026

Copy link
Copy Markdown
Contributor

ℹ️ Note

This PR body was truncated due to platform limits.

This PR contains the following updates:

Package Type Update Change
ch.epfl.scala:sbt-scalafix plugin patch 0.14.60.14.7
com.github.sbt:sbt-native-packager plugin patch 1.11.11.11.7
com.konghq:unirest-java patch 3.14.23.14.5
com.thesamet.scalapb:scalapb-json4s patch 0.12.00.12.2
com.typesafe.play:play-json patch 2.10.62.10.8
com.typesafe.scala-logging:scala-logging patch 3.9.53.9.6
com.typesafe:config patch 1.4.61.4.9
io.dropwizard:dropwizard-auth patch 4.0.74.0.17
io.dropwizard:dropwizard-auth provided patch 4.0.74.0.17
io.dropwizard:dropwizard-auth patch 1.3.231.3.29
io.dropwizard:dropwizard-client patch 1.3.231.3.29
io.dropwizard:dropwizard-core patch 4.0.74.0.17
io.dropwizard:dropwizard-core provided patch 4.0.74.0.17
io.dropwizard:dropwizard-core patch 1.3.231.3.29
io.dropwizard:dropwizard-testing Test patch 4.0.74.0.17
io.github.classgraph:classgraph Test patch 4.8.1844.8.192
io.github.classgraph:classgraph patch 4.8.1574.8.192
io.github.classgraph:classgraph patch 4.8.1844.8.192
io.kubernetes:client-java patch 21.0.021.0.2-legacy
io.netty:netty-all patch 4.2.15.Final4.2.17.Final
io.netty:netty-buffer patch 4.2.15.Final4.2.17.Final
io.netty:netty-codec patch 4.2.15.Final4.2.17.Final
io.netty:netty-codec-http patch 4.2.15.Final4.2.17.Final
io.netty:netty-codec-http2 patch 4.2.15.Final4.2.17.Final
io.netty:netty-codec-socks patch 4.2.15.Final4.2.17.Final
io.netty:netty-common patch 4.2.15.Final4.2.17.Final
io.netty:netty-handler patch 4.2.15.Final4.2.17.Final
io.netty:netty-handler-proxy patch 4.2.15.Final4.2.17.Final
io.netty:netty-resolver patch 4.2.15.Final4.2.17.Final
io.netty:netty-transport patch 4.2.15.Final4.2.17.Final
io.netty:netty-transport-classes-epoll patch 4.2.15.Final4.2.17.Final
io.netty:netty-transport-native-epoll patch 4.2.15.Final4.2.17.Final
io.netty:netty-transport-native-unix-common patch 4.2.15.Final4.2.17.Final
org.apache.commons:commons-jcs3-core patch 3.23.2.1
org.eclipse.jetty:jetty-http patch 9.4.20.v201908139.4.58.v20250814
org.eclipse.jetty:jetty-server patch 9.4.20.v201908139.4.58.v20250814
org.eclipse.jetty:jetty-servlet provided patch 11.0.2411.0.26
org.eclipse.jetty:jetty-servlet patch 9.4.20.v201908139.4.58.v20250814
org.eclipse.jgit:org.eclipse.jgit patch 5.13.0.202109080827-r5.13.5.202508271544-r
org.ehcache:sizeof patch 0.4.30.4.4
org.playframework:play-json patch 3.1.0-M13.1.0-M10
org.postgresql:postgresql (source) patch 42.7.1042.7.13
org.scalatest:scalatest (source) Test patch 3.2.153.2.20
org.scalatest:scalatest (source) Test patch 3.2.173.2.20
org.slf4j:slf4j-api patch 1.7.261.7.36
sbt/sbt patch 1.12.91.12.15

Release Notes

scalacenter/sbt-scalafix (ch.epfl.scala:sbt-scalafix)

v0.14.7

Compare Source

Pull Requests

sbt/sbt-native-packager (com.github.sbt:sbt-native-packager)

v1.11.7: 1.11.7 SBT Native Packager 📦

Compare Source

In This Release

  • Use release drafter for releases (#​1737)
  • Update sbt-ghpages to 0.9.0 (#​1723)
  • Update sbt, scripted-plugin to 1.11.7 (#​1728)
  • Update sbt-scalafmt to 2.5.6 (#​1729)
  • Use eclipse-temurin:25 For Base Image (#​1735)
  • Remove sbt-heroku from related plugins list (#​1731)

🐛 Bug Fixes

v1.11.4: 1.11.4

Compare Source

sbt-native-packager 1.11.4 is cross published to:

sbt Version Published
1.x
2.x

About sbt-native-packager

sbt-native-packager is an sbt plugin to build packages for different operating systems. See https://www.scala-sbt.org/sbt-native-packager/ for the documentation.

Security update

Updates

Behind the scene

Full Changelog: sbt/sbt-native-packager@v1.11.3...v1.11.4

v1.11.3: 1.11.3

Compare Source

sbt-native-packager 1.11.3 is cross published to:

sbt Version Published
1.x
2.x

About sbt-native-packager

sbt-native-packager is an sbt plugin to build packages for different operating systems. See https://www.scala-sbt.org/sbt-native-packager/ for the documentation.

sbt 2.x migration

Other updates

Behind the scene

New Contributors

Full Changelog: sbt/sbt-native-packager@v1.11.1...v1.11.3

scalapb/scalapb-json4s (com.thesamet.scalapb:scalapb-json4s)

v0.12.2

Compare Source

v0.12.1

Compare Source

playframework/play-json (com.typesafe.play:play-json)

v2.10.8: Play JSON 2.10.8

Compare Source

Noteworthy improvements

  • #​1226 [2.10.x] Avoid running out of memory when parsing heavily nested arrays or objects by @​mkurz
    • We now limit the maximum allowed nesting depth of JSON structures (arrays, objects, or a mix of both) to 1000.
      This limit can be adjusted using the system property play.json.parser.maxNestingDepth.
      We assume a depth of 1000 should be more than sufficient for virtually all real-world use cases.

      This change helps prevent both potential OutOfMemoryErrors and StackOverflowErrors.
      The latter, however, is not a concern for Play JSON, since it already uses a @tailrec-optimized parsing method.
      As a result, Play JSON is not affected by CVE-2025-52999, which specifically addresses StackOverflowError risks.
      This improvement is simply an additional safety measure.

Changes

❤️ Thanks to our premium sponsors!

If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor.
You can also individually sponsor the project by becoming a backer.

🙇 Thanks to our contributors

Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors.
Special thanks to all code contributors who helped with this particular release (they are listed below)!

v2.10.7: Play JSON 2.10.7

Compare Source

Noteworthy Scala 3 improvements

Changes

❤️ Thanks to our premium sponsors!

If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor.
You can also individually sponsor the project by becoming a backer.

🙇 Thanks to our contributors

Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors.
Special thanks to all code contributors who helped with this particular release (they are listed below)!

lightbend/scala-logging (com.typesafe.scala-logging:scala-logging)

v3.9.6

Compare Source

What's Changed
New Contributors

Full Changelog: scala-garden/scala-logging@v3.9.5...v3.9.6

lightbend/config (com.typesafe:config)

v1.4.9

What's Changed

New Contributors

Full Changelog: lightbend/config@v1.4.8...v1.4.9

v1.4.8

What's Changed

Full Changelog: lightbend/config@v1.4.7...v1.4.8

v1.4.7

What's Changed

New Contributors

Full Changelog: lightbend/config@v1.4.6...v1.4.7

kubernetes-client/java (io.kubernetes:client-java)

v21.0.2-legacy

Compare Source

[maven-release-plugin] copy for tag v21.0.2-legacy

v21.0.1

Compare Source

  • Misc
    • Patch release — dependency and stability updates.

v21.0.0-legacy

Compare Source

ehcache/sizeof (org.ehcache:sizeof)

v0.4.4

Compare Source

pgjdbc/pgjdbc (org.postgresql:postgresql)

v42.7.13

Added
  • feat: invalidate the prepared-statement cache when the server reports a search_path change via GUC_REPORT (PostgreSQL 18+), so cached plans are no longer used against the wrong schema PR #​4259
  • feat: reWriteBatchedInserts now merges up to 32768 rows into one multi-values INSERT (bounded by the 65535 bind-parameter limit on the extended protocol) instead of capping at 128, which speeds up batches of few-column rows. The new reWriteBatchedInsertsSize connection property lowers that cap when set; the default of 0 uses that maximum. PR #​4207
  • feat: invalidate the prepared-statement cache after CREATE/DROP/ALTER so callers no longer trip on "cached plan must not change result type" without opting into autosave=ALWAYS. Controlled by the new flushCacheOnDdl connection property (default true); set to false for the prior behaviour. PR #​4067
  • feat: add connectExecutor connection property to customize the Executor used to run the worker task that performs the connection attempt when loginTimeout is in effect. The value is the fully qualified name of a class implementing java.util.concurrent.Executor. With a null value, the default, the driver retains the prior behavior of running the connection attempt on a daemon thread named "PostgreSQL JDBC driver connection thread". The executor must run the task on a thread other than the caller's. Running the attempt on a named thread lets applications that monitor driver-created threads identify it. PR #​4165
  • feat: add classLoaderStrategy connection property to control which classloaders the driver searches when loading a class named by a connection property, for example socketFactory. The default driver-first now falls back to the thread context classloader when the driver's classloader cannot resolve the class, which fixes class loading in non-flat class paths such as Quarkus and OSGi. Set driver to keep the previous driver-classloader-only behaviour, or context-first to prefer the thread context classloader Issue #​2112 PR #​4167
  • feat: add OID constants for geometric arrays, RECORD, and refcursor PR #​4220
  • feat: LargeObject BlobInputStream now skips by seeking instead of reading, and the driver exposes the server version so it can select the 64-bit large-object API where available PR #​4204
Changed
  • refactor: the worker that runs the connection attempt under loginTimeout is now a FutureTask (ConnectTask) instead of the hand-rolled ConnectThread. When the caller hits the timeout, the task is now cancelled with cancel(true), which interrupts the worker thread rather than letting it run to completion. This makes the connection attempt interruptible, so loginTimeout can stop a slow connection attempt instead of leaking a thread. As before, a connection that the worker still manages to establish after the caller gives up is closed by the worker so that it does not leak. There are no public API changes and this should only lead to faster background resource cleanup for connections that time out. PR #​4120
  • chore: PGXAConnection.ConnectionHandler now rejects setAutoCommit(false) and setSavepoint(...) during an active XA branch, in addition to the long-rejected setAutoCommit(true) / commit() / rollback(). The setSavepoint rejection was already meant to be in place but the guard misspelled the method name as setSavePoint, so savepoints silently went through. Both changes bring the proxy in line with JTA 1.2 §3.4. PR #​4114
  • chore: commitPrepared / rollback-of-prepared now return XAER_RMFAIL instead of XAER_RMERR when the underlying connection is left in a non-idle TransactionState. Transaction managers (Geronimo, Narayana, Atomikos) treat XAER_RMFAIL as retryable on a fresh XAResource; the prepared transaction is no longer abandoned. PR #​4114
  • refactor: derive getPrimaryKeys from pg_constraint.conkey PR #​4202
Fixed
  • fix: the published GitHub release now ships the released postgresql-<version>.jar and its detached PGP signature, taken from the same signed build that is uploaded to Maven Central, instead of a leftover SNAPSHOT jar Issue #​3812 PR #​3814
  • fix: simplify the Statement#cancel state machine by dropping the redundant CANCELLED state. killTimerTask now waits for the state to return to IDLE directly, which removes a spin-forever case when more than one thread observes the cancel completing PR #​1827.
  • perf: defer simple-query flushes until the driver reads the response, allowing BEGIN and the following query to share a network flush Issue #​3894 PR #​4196
  • fix: reWriteBatchedInserts no longer throws IllegalArgumentException when batching a parameterless INSERT (for example INSERT INTO t VALUES (1, 2)) of 256 rows or more PR #​4207
  • fix: a comment before CALL in a CallableStatement no longer hides the native call, so OUT parameter registration works for /* comment */ call proc(?, ?) and similar. Parser.modifyJdbcCall now skips leading whitespace and SQL comments (both -- and /* */) before the call, tolerates a trailing comment after a { ... } escape, and no longer adds a spurious comma when moving an OUT parameter into a call whose arguments are only a comment Issue #​2538 PR #​4209
  • fix: PreparedStatement.toString() no longer throws for a bytea value supplied as text via PGobject. Hex-format values (\x...) are validated and rendered as a bytea literal, and escape-format values are quoted and cast like any other literal Issue #​3757 PR #​4201
  • fix: the driver no longer nulls the contextClassLoader of shared ForkJoinPool.commonPool() worker threads, which previously left unrelated tasks on those threads running with a null classloader Issue #​4155 PR #​4156
  • fix: PgResultSet#getCharacterStream wraps String in a StringReader PR #​4063
  • fix: PGXAConnection no longer saves and restores the underlying connection's JDBC autoCommit flag. All XA-protocol SQL (BEGIN, PREPARE TRANSACTION, COMMIT, ROLLBACK, COMMIT PREPARED, ROLLBACK PREPARED, the recover() SELECT) is sent through QUERY_SUPPRESS_BEGIN, so the caller's autoCommit value is invariant across every XAResource call. Fixes the "2nd phase commit must be issued using an idle connection" failure during recovery on managed datasources that pool connections with autoCommit=false (TomEE, WildFly, WebSphere Liberty) PR #​4114
  • fix: PGXAConnection.prepare() now mutates XA state only after PREPARE TRANSACTION succeeds. A failed PREPARE previously left the driver thinking the branch was already prepared, so the follow-up rollback(xid) tried ROLLBACK PREPARED against a non-existent gid and returned XAER_RMERR. Transaction managers (Narayana) escalated this to HeuristicMixedException. With the fix, rollback(xid) takes the active-branch path and issues a plain ROLLBACK, which the server accepts cleanly. Fixes Issue #​3153, Issue #​3123. PR #​4114
  • fix: an updatable result set over an unqualified table name is now classified using only the table visible through search_path. When two schemas held a table with the same name and the same primary or unique index name but a different set of key columns, the driver took the union of both schemas' columns, so the result set could be wrongly rejected as not updatable PR #​4214. Supersedes PR #​3400.
  • fix: LargeObject.close() now flushes a buffered output stream before marking the object closed, so closing a large object without an explicit flush() no longer drops buffered writes. The flush runs while the object is still open (it calls back into LargeObject.write()), and lo_close always runs

Note

PR body was truncated to here.


Configuration

📅 Schedule: (in timezone Etc/UTC)

  • Branch creation
    • "before 8am on monday"
  • Automerge
    • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

👻 Immortal: This PR will be recreated if closed unmerged. Get config help if that's undesired.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.

@forking-renovate forking-renovate Bot added the dependencies Pull requests that update a dependency file label Aug 17, 2026
@github-actions github-actions Bot added engine common platform Non-amber Scala service paths labels Aug 17, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Automated Reviewer Suggestions

Based on the git blame history of the changed files, we recommend the following reviewers:

  • Committers with relevant context: @pjfanning
    You can request their reviews formally with /request-review @pjfanning.

  • Contributors with relevant context: @kz930, @Ma77Ball, @aglinxinyuan
    You can notify them by mentioning @kz930, @Ma77Ball, @aglinxinyuan in a comment.

@github-actions

Copy link
Copy Markdown
Contributor

⚠️ Benchmark changes need a look

🟢 0 better · 🔴 4 worse · ⚪ 11 noise (<±5%) · 0 without baseline

Compared against main 7fd4f89 benchmarked on this same runner, so the delta is largely free of cross-runner hardware noise. The "7d avg" column still reflects the gh-pages dashboard. Treat <±5% as noise unless repeated.

Dashboard · Run

config throughput MB/s latency max Δ latest / 7d
🔴 bs=10 sw=10 sl=64 337 0.206 30,010/37,108/37,108 us 🔴 +10.1% / 🔴 +137.7%
🔴 bs=100 sw=10 sl=64 744 0.454 132,178/164,151/164,151 us 🔴 +5.7% / 🔴 +55.4%
bs=1000 sw=10 sl=64 893 0.545 1,112,466/1,201,575/1,201,575 us ⚪ within ±5% / 🔴 +18.7%
Baseline details

Latest main 7fd4f89 from same runner

config metric PR latest main 7d avg Δ latest Δ 7d
bs=10 sw=10 sl=64 throughput 337 tuples/sec 368 tuples/sec 784.16 tuples/sec -8.4% -57.0%
bs=10 sw=10 sl=64 MB/s 0.206 MB/s 0.225 MB/s 0.479 MB/s -8.4% -57.0%
bs=10 sw=10 sl=64 p50 30,010 us 27,258 us 12,626 us +10.1% +137.7%
bs=10 sw=10 sl=64 p95 37,108 us 37,715 us 16,169 us -1.6% +129.5%
bs=10 sw=10 sl=64 p99 37,108 us 37,715 us 18,986 us -1.6% +95.4%
bs=100 sw=10 sl=64 throughput 744 tuples/sec 769 tuples/sec 1,023 tuples/sec -3.3% -27.3%
bs=100 sw=10 sl=64 MB/s 0.454 MB/s 0.469 MB/s 0.625 MB/s -3.2% -27.3%
bs=100 sw=10 sl=64 p50 132,178 us 125,035 us 99,185 us +5.7% +33.3%
bs=100 sw=10 sl=64 p95 164,151 us 170,682 us 105,616 us -3.8% +55.4%
bs=100 sw=10 sl=64 p99 164,151 us 170,682 us 113,681 us -3.8% +44.4%
bs=1000 sw=10 sl=64 throughput 893 tuples/sec 896 tuples/sec 1,057 tuples/sec -0.3% -15.5%
bs=1000 sw=10 sl=64 MB/s 0.545 MB/s 0.547 MB/s 0.645 MB/s -0.4% -15.5%
bs=1000 sw=10 sl=64 p50 1,112,466 us 1,109,545 us 965,435 us +0.3% +15.2%
bs=1000 sw=10 sl=64 p95 1,201,575 us 1,188,302 us 1,012,135 us +1.1% +18.7%
bs=1000 sw=10 sl=64 p99 1,201,575 us 1,188,302 us 1,042,088 us +1.1% +15.3%
Raw CSV
config_idx,batch_size,schema_width,string_len,num_batches,total_ms,total_tuples,total_bytes,tuples_per_sec,mb_per_sec,lat_p50_us,lat_p95_us,lat_p99_us
0,10,10,64,20,593.01,200,128000,337,0.206,30010.30,37107.70,37107.70
1,100,10,64,20,2687.82,2000,1280000,744,0.454,132177.70,164150.66,164150.66
2,1000,10,64,20,22403.01,20000,12800000,893,0.545,1112465.51,1201574.64,1201574.64

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

common dependencies Pull requests that update a dependency file engine platform Non-amber Scala service paths

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant