You are viewing a plain text version of this content. The canonical link for it is here.
Posted to reviews@spark.apache.org by "sarutak (via GitHub)" <gi...@apache.org> on 2026/10/13 08:54:16 UTC
[PR] [SPARK-60213][BUILD] Upgrade sbt to `1.13.0` [spark]
sarutak opened a new pull request, #59429:
URL: https://github.com/apache/spark/pull/59429
### What changes were proposed in this pull request?
This PR upgrades sbt from `1.12.13` to `1.13.0`.
### Why are the changes needed?
sbt 1.13.0 fixes a remote code execution vulnerability (GHSA-943m-f264-54p4): when `serverConnectionType` is set to `Tcp`, an attacker can execute arbitrary code remotely via BSP. Builds using the default `serverConnectionType` are not affected, but upgrading picks up the fix regardless.
The full release notes as follows:
- https://github.com/sbt/sbt/releases/tag/v1.13.0
- https://github.com/sbt/sbt/releases/tag/v1.12.15
- https://github.com/sbt/sbt/releases/tag/v1.12.14
### Does this PR introduce _any_ user-facing change?
No.
### How was this patch tested?
GA.
### Was this patch authored or co-authored using generative AI tooling?
No.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
Re: [PR] [SPARK-60213][BUILD] Upgrade sbt to `1.13.0` [spark]
Posted by "sarutak (via GitHub)" <gi...@apache.org>.
sarutak commented on PR #59429:
URL: https://github.com/apache/spark/pull/59429#issuecomment-6142206463
Thank you, @HyukjinKwon !
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
Re: [PR] [SPARK-60213][BUILD] Upgrade sbt to `1.13.0` [spark]
Posted by "sarutak (via GitHub)" <gi...@apache.org>.
sarutak commented on PR #59429:
URL: https://github.com/apache/spark/pull/59429#issuecomment-6147007918
**Merge Summary:**
- merged into master https://github.com/apache/spark/commit/70b21e81bc64ee7d9ef0ef47d25c451892f2a798
*Posted by `merge_spark_pr.py`*
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
Re: [PR] [SPARK-60213][BUILD] Upgrade sbt to `1.13.0` [spark]
Posted by "sarutak (via GitHub)" <gi...@apache.org>.
sarutak commented on PR #59429:
URL: https://github.com/apache/spark/pull/59429#issuecomment-6147018378
Merged. Thank you @HyukjinKwon for reviewing!
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org
Re: [PR] [SPARK-60213][BUILD] Upgrade sbt to `1.13.0` [spark]
Posted by "sarutak (via GitHub)" <gi...@apache.org>.
sarutak closed pull request #59429: [SPARK-60213][BUILD] Upgrade sbt to `1.13.0`
URL: https://github.com/apache/spark/pull/59429
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: reviews-unsubscribe@spark.apache.org
For additional commands, e-mail: reviews-help@spark.apache.org