This is an automated email from the ASF dual-hosted git repository.
dongjoon pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/spark.git
The following commit(s) were added to refs/heads/master by this push:
new 953ef9e70fb [SPARK-41113][BUILD] Upgrade sbt to 1.8.0
953ef9e70fb is described below
commit 953ef9e70fb1afcdabf400637c3a702b87eb8a56
Author: YangJie <[email protected]>
AuthorDate: Tue Nov 15 13:28:03 2022 -0800
[SPARK-41113][BUILD] Upgrade sbt to 1.8.0
### What changes were proposed in this pull request?
This pr aims to upgrade sbt from 1.7.3 to 1.8.0
### Why are the changes needed?
This version fix 2 CVE:
- Updates to Coursier 2.1.0-RC1 to address
https://github.com/advisories/GHSA-wv7w-rj2x-556x
- Updates to Ivy 2.3.0-sbt-a8f9eb5bf09d0539ea3658a2c2d4e09755b5133e to
address https://github.com/advisories/GHSA-wv7w-rj2x-556x
The full release notes as follows:
- https://github.com/sbt/sbt/releases/tag/v1.8.0
### Does this PR introduce _any_ user-facing change?
No
### How was this patch tested?
- Pass GitHub Actions
- Run ` dev/sbt-checkstyle` passed
Closes #38620 from LuciferYang/sbt-180.
Lead-authored-by: YangJie <[email protected]>
Co-authored-by: yangjie01 <[email protected]>
Signed-off-by: Dongjoon Hyun <[email protected]>
---
dev/appveyor-install-dependencies.ps1 | 2 +-
project/build.properties | 2 +-
2 files changed, 2 insertions(+), 2 deletions(-)
diff --git a/dev/appveyor-install-dependencies.ps1
b/dev/appveyor-install-dependencies.ps1
index 1c36e76fb0f..caa281d5c9c 100644
--- a/dev/appveyor-install-dependencies.ps1
+++ b/dev/appveyor-install-dependencies.ps1
@@ -97,7 +97,7 @@ if (!(Test-Path $tools)) {
# ========================== SBT
Push-Location $tools
-$sbtVer = "1.7.3"
+$sbtVer = "1.8.0"
Start-FileDownload
"https://github.com/sbt/sbt/releases/download/v$sbtVer/sbt-$sbtVer.zip";
"sbt.zip"
# extract
diff --git a/project/build.properties b/project/build.properties
index f5c34287a4d..33236b9f48d 100644
--- a/project/build.properties
+++ b/project/build.properties
@@ -15,4 +15,4 @@
# limitations under the License.
#
# Please update the version in appveyor-install-dependencies.ps1 together.
-sbt.version=1.7.3
+sbt.version=1.8.0
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
