sbt 1.5.6
I’m happy to announce sbt 1.5.6 patch release is available. Full release note is here - https://github.com/sbt/sbt/releases/tag/v1.5.6
Highlights
- Updates log4j 2 to 2.15.0, which fixes remote code execution vulnerability (CVE-2021-44228) #6743 by @eed3si9n
How to upgrade
Download the official sbt runner + launcher from SDKMAN or download from https://github.com/sbt/sbt/releases/.
In addition, the sbt version used for your build is upgraded by putting the following in project/build.properties
:
sbt.version=1.5.6
This mechanism allows that sbt 1.5.6 is used only for the builds that you want.
Participation
sbt 1.5.6 was brought to you by 2 contributors. Eugene Yokota (eed3si9n) and Daniel Darabos. Thank you!
Thanks to everyone who’s helped improve sbt and Zinc 1 by using them, reporting bugs, improving our documentation, porting builds, porting plugins, and submitting and reviewing pull requests.
For anyone interested in helping sbt, there are many avenues for you to help, depending on your interest. If you’re interested, Contributing, “help wanted”, “good first issue” are good starting points. If you have ideas let us know on sbt Discussions.
Donate/Hire April
Apparently April, an active contributor to Scala compiler has been sick without diagnosis. Let’s help her out!
- https://www.gofundme.com/f/help-april-survive-while-sick
- https://twitter.com/NthPortal/status/1412504710754541572