Update dependency sbt/sbt to v1.8.3 #26

Merged

renovate[bot] merged 1 commit from renovate/sbt-sbt-1.x into master

2023-06-01 00:50:44 +00:00

renovate[bot] commented

2023-06-01 00:19:53 +00:00

(Migrated from github.com)

This PR contains the following updates:

Package	Update	Change
sbt/sbt	patch	`1.8.2` -> `1.8.3`

Release Notes

sbt/sbt

`v1.8.3`: 1.8.3

Compare Source

Security fix

Fixes sbt.io.IO.withTemporaryFile not limiting access on Unix-like systems in io#344/zinc#1185 by @eed3si9n

IO.withTemporaryFile fix

sbt 1.8.3 fixes sbt.io.IO.withTemporaryFile etc not limiting access on Unix-like systems. Prior to this patch release, some functions were using java.io.File.createTempFile, which does not set strict file permissions, as opposed to the NIO-equivalent that does.

This means that on a shared Unix-like systems, build user or plugin's use of sbt.io.IO.withTemporaryFile etc would have exposed the information to other users.

This issue was reported by Oleksandr Zolotko at IBM, and was fixed by Eugene Yokota (@eed3si9n) in io#344/zinc#1185.

Other updates

sbt 1.8.3 backports Zinc and IO fixes from 1.9.0-RC2 as well.

Fixes Zinc incremental compilation looping infinitely zinc#1182 by @CarstonSchilds
Fixes spurious whitespace in the runner script by @keynmol in #7134
Fixes NullPointerError under -Vdebug by @som-snytt in zinc#1141
Avoids deprecated java.net.URL constructor by @xuwei-k in io#341
Updates to Swoval 2.1.10 by @eatkins in io#343
Notifies ClassFileManager from IncOptions in Incremental.prune by @lrytz in zinc1148
Adds FileFilter.nothing and FileFilter.everything by @mdedetrich in io#340

Configuration

📅 Schedule: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

If you want to rebase/retry this PR, check this box

This PR has been generated by Mend Renovate. View repository job log here.

[![Mend Renovate](https://app.renovatebot.com/images/banner.svg)](https://renovatebot.com) This PR contains the following updates: | Package | Update | Change | |---|---|---| | [sbt/sbt](https://togithub.com/sbt/sbt) | patch | `1.8.2` -> `1.8.3` | --- ### Release Notes <details> <summary>sbt/sbt</summary> ### [`v1.8.3`](https://togithub.com/sbt/sbt/releases/tag/v1.8.3): 1.8.3 [Compare Source](https://togithub.com/sbt/sbt/compare/v1.8.2...v1.8.3) ##### Security fix - Fixes `sbt.io.IO.withTemporaryFile` not limiting access on Unix-like systems in [io#344][io344]/[zinc#1185][zinc1185] by [@eed3si9n][@eed3si9n] ##### IO.withTemporaryFile fix sbt 1.8.3 fixes `sbt.io.IO.withTemporaryFile` etc not limiting access on Unix-like systems. Prior to this patch release, some functions were using `java.io.File.createTempFile`, which does not set strict file permissions, as opposed to the NIO-equivalent that does. This means that on a shared Unix-like systems, build user or plugin's use of `sbt.io.IO.withTemporaryFile` etc would have exposed the information to other users. This issue was reported by Oleksandr Zolotko at IBM, and was fixed by Eugene Yokota ([@eed3si9n][@eed3si9n]) in [io#344][io344]/[zinc#1185][zinc1185]. ##### Other updates sbt 1.8.3 backports Zinc and IO fixes from 1.9.0-RC2 as well. - Fixes Zinc incremental compilation looping infinitely [zinc#1182][zinc1182] by [@CarstonSchilds][@CarstonSchilds] - Fixes spurious whitespace in the runner script by [@keynmol][@keynmol] in [#7134][7134] - Fixes NullPointerError under `-Vdebug` by [@som-snytt][@som-snytt] in [zinc#1141][zinc1141] - Avoids deprecated `java.net.URL` constructor by [@xuwei-k][@xuwei-k] in [io#341][io341] - Updates to Swoval 2.1.10 by [@eatkins][@eatkins] in [io#343][io343] - Notifies `ClassFileManager` from `IncOptions` in `Incremental.prune` by [@lrytz] in [zinc1148][zinc1148] - Adds `FileFilter.nothing` and `FileFilter.everything` by [@mdedetrich][@mdedetrich] in [io#340][io340] [@eed3si9n]: https://togithub.com/eed3si9n [@Nirvikalpa108]: https://togithub.com/Nirvikalpa108 [@adpi2]: https://togithub.com/adpi2 [@er1c]: https://togithub.com/er1c [@eatkins]: https://togithub.com/eatkins [@dwijnand]: https://togithub.com/dwijnand [@ckipp01]: https://togithub.com/ckipp01 [@mdedetrich]: https://togithub.com/mdedetrich [@xuwei-k]: https://togithub.com/xuwei-k [@nrinaudo]: https://togithub.com/nrinaudo [@CarstonSchilds]: https://togithub.com/CarstonSchilds [@som-snytt]: https://togithub.com/som-snytt [@lrytz]: https://togithub.com/lrytz [@dragos]: https://togithub.com/dragos [@keynmol]: https://togithub.com/keynmol [@mzuehlke]: https://togithub.com/mzuehlke [@yoshinorin]: https://togithub.com/yoshinorin [@liang3zy22]: https://togithub.com/liang3zy22 [@adriaanm]: https://togithub.com/adriaanm [7096]: https://togithub.com/sbt/sbt/pull/7096 [7215]: ttps://github.com/sbt/sbt/pull/7215 [7191]: https://togithub.com/sbt/sbt/pull/7191 [7228]: https://togithub.com/sbt/sbt/pull/7228 [7134]: https://togithub.com/sbt/sbt/pull/7134 [7165]: https://togithub.com/sbt/sbt/pull/7165 [7154]: https://togithub.com/sbt/sbt/pull/7154 [7227]: https://togithub.com/sbt/sbt/pull/7227 [7171]: https://togithub.com/sbt/sbt/pull/7171 [7234]: https://togithub.com/sbt/sbt/pull/7234 [zinc1182]: https://togithub.com/sbt/zinc/pull/1182 [zinc1141]: https://togithub.com/sbt/zinc/pull/1141 [zinc1148]: https://togithub.com/sbt/zinc/pull/1148 [lm410]: https://togithub.com/sbt/librarymanagement/pull/410 [lm411]: https://togithub.com/sbt/librarymanagement/pull/411 [lm413]: https://togithub.com/sbt/librarymanagement/pull/413 [lm415]: https://togithub.com/sbt/librarymanagement/pull/415 [io340]: https://togithub.com/sbt/io/pull/340 [io341]: https://togithub.com/sbt/io/pull/341 [io343]: https://togithub.com/sbt/io/pull/343 [coursier2633]: https://togithub.com/coursier/coursier/pull/2633 [io344]: https://togithub.com/sbt/io/pull/344 [zinc1185]: https://togithub.com/sbt/zinc/pull/1185 </details> --- ### Configuration 📅 **Schedule**: Branch creation - "before 3am on the first day of the month" (UTC), Automerge - At any time (no schedule defined). 🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied. ♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox. 🔕 **Ignore**: Close this PR and you won't be reminded about this update again. --- - [ ] If you want to rebase/retry this PR, check this box --- This PR has been generated by [Mend Renovate](https://www.mend.io/free-developer-tools/renovate/). View repository job log [here](https://app.renovatebot.com/dashboard#github/navicore/navi-xml).