From 953ef9e70fb1afcdabf400637c3a702b87eb8a56 Mon Sep 17 00:00:00 2001 From: YangJie Date: Tue, 15 Nov 2022 13:28:03 -0800 Subject: [PATCH] [SPARK-41113][BUILD] Upgrade sbt to 1.8.0 ### What changes were proposed in this pull request? This pr aims to upgrade sbt from 1.7.3 to 1.8.0 ### Why are the changes needed? This version fix 2 CVE: - Updates to Coursier 2.1.0-RC1 to address https://github.com/advisories/GHSA-wv7w-rj2x-556x - Updates to Ivy 2.3.0-sbt-a8f9eb5bf09d0539ea3658a2c2d4e09755b5133e to address https://github.com/advisories/GHSA-wv7w-rj2x-556x The full release notes as follows: - https://github.com/sbt/sbt/releases/tag/v1.8.0 ### Does this PR introduce _any_ user-facing change? No ### How was this patch tested? - Pass GitHub Actions - Run ` dev/sbt-checkstyle` passed Closes #38620 from LuciferYang/sbt-180. Lead-authored-by: YangJie Co-authored-by: yangjie01 Signed-off-by: Dongjoon Hyun --- dev/appveyor-install-dependencies.ps1 | 2 +- project/build.properties | 2 +- 2 files changed, 2 insertions(+), 2 deletions(-) diff --git a/dev/appveyor-install-dependencies.ps1 b/dev/appveyor-install-dependencies.ps1 index 1c36e76fb0f41..caa281d5c9cf6 100644 --- a/dev/appveyor-install-dependencies.ps1 +++ b/dev/appveyor-install-dependencies.ps1 @@ -97,7 +97,7 @@ if (!(Test-Path $tools)) { # ========================== SBT Push-Location $tools -$sbtVer = "1.7.3" +$sbtVer = "1.8.0" Start-FileDownload "https://github.com/sbt/sbt/releases/download/v$sbtVer/sbt-$sbtVer.zip" "sbt.zip" # extract diff --git a/project/build.properties b/project/build.properties index f5c34287a4da6..33236b9f48def 100644 --- a/project/build.properties +++ b/project/build.properties @@ -15,4 +15,4 @@ # limitations under the License. # # Please update the version in appveyor-install-dependencies.ps1 together. -sbt.version=1.7.3 +sbt.version=1.8.0