▲ 29 r/scala
sbt 1.12.15 and 2.0.6 are released with a CVE fix
📢 Released sbt 1.12.15 and 2.0.6, featuring vulnerability fix for remote code execution via server when serverConnectionType is set to Tcp. We recommend removing the serverConnectionType setting, or upgrading to a patched version or later.
u/eed3si9n — 13 days ago
▲ 25 r/scala
Jar Jar Abrams 1.17.0 and sbt-assembly 2.4.0 released
eed3si9n.comu/eed3si9n — 28 days ago
▲ 32 r/scala
sbt 1.12.14 and 2.0.3 released
🧑🚒 released sbt 1.12.14 and 2.0.3, featuring
- backport of CVE-2026-26032 fix for Ivy (while sbt might not be affected)
- update to Jawn 1.7.0 for CVE-2026-59990 and CVE-2026-61814 fixes
u/eed3si9n — 1 month ago
▲ 159 r/scala
🛠️ sbt 2.0.0 released
sbt 2.0 is a new major series of sbt, based on Scala 3 constructs and Bazel-compatible cache system. many thanks to Scala Center, Anatolii Kmetiuk (new maintainer), Adrien Piquerez (alumni), and other volunteers like Kenji Yoshida https://eed3si9n.com/sbt-2.0.0
u/eed3si9n — 2 months ago