Merge pull request #160 from gmixa/main

Updateing snakeyaml due to CVE-2022-38750

.github/workflows/ci.yml

@@ -23,7 +23,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest, macos-latest]
-        scala: [2.12.17]
+        scala: [2.12.18]
         java: [temurin@8, graal_22.3.0@17]
     runs-on: ${{ matrix.os }}
     steps:
@@ -71,7 +71,7 @@ jobs:
     strategy:
       matrix:
         os: [ubuntu-latest]
-        scala: [2.12.17]
+        scala: [2.12.18]
         java: [temurin@8]
     runs-on: ${{ matrix.os }}
     steps:
@@ -98,12 +98,12 @@ jobs:
           github-token: ${{ secrets.GITHUB_TOKEN }}
           cache: sbt
 
-      - name: Download target directories (2.12.17)
+      - name: Download target directories (2.12.18)
         uses: actions/download-artifact@v3
         with:
-          name: target-${{ matrix.os }}-2.12.17-${{ matrix.java }}
+          name: target-${{ matrix.os }}-2.12.18-${{ matrix.java }}
 
-      - name: Inflate target directories (2.12.17)
+      - name: Inflate target directories (2.12.18)
         run: |
           tar xf targets.tar
           rm targets.tar

build.sbt

@@ -16,7 +16,7 @@
 
 name := "sbt-github-actions"
 
-lazy val scala212 = "2.12.17"
+lazy val scala212 = "2.12.18"
 ThisBuild / organization := "com.github.sbt"
 ThisBuild / crossScalaVersions := Seq(scala212)
 ThisBuild / scalaVersion := scala212
@@ -58,7 +58,7 @@ publishMavenStyle := true
 scalacOptions +=
   "-Xlint:_,-missing-interpolator"
 
-libraryDependencies += "org.specs2" %% "specs2-core" % "4.12.12" % Test
+libraryDependencies += "org.specs2" %% "specs2-core" % "4.19.2" % Test
 
 enablePlugins(SbtPlugin)
 

libraries.sbt

@@ -14,4 +14,4 @@
  * limitations under the License.
  */
 
-libraryDependencies += "org.yaml" % "snakeyaml" % "1.29"
+libraryDependencies += "org.yaml" % "snakeyaml" % "2.0"

project/build.properties

@@ -1 +1 @@
-sbt.version=1.9.0
+sbt.version=1.9.3