Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Include dependency overrides in list of dependencies to update #61

Merged

Conversation

collinkueter
Copy link
Contributor

Often time vulnerabilities are found in transitive dependencies, if you list all your project's dependencies (including transitive) in dependencyOverrides and we enable Scala Steward to check for library upgrades to dependencyOverrides then Scala Steward can help automatically keep transitive dependencies up to date.

@mzuehlke
Copy link
Member

Switching the import statements from _ to * would only work on sbt 1.6.0 and newer.
Could you revert these changes please.

Other than that I think the change makes sense. There was a discussion about dependencyOverrides scala-steward-org/scala-steward#3041 without any answer...

@collinkueter
Copy link
Contributor Author

Switching the import statements from _ to * would only work on sbt 1.6.0 and newer. Could you revert these changes please.

Other than that I think the change makes sense. There was a discussion about dependencyOverrides scala-steward-org/scala-steward#3041 without any answer...

Reverted those changes in 529d9a6

@mzuehlke mzuehlke merged commit c0b907d into scala-steward-org:main Oct 8, 2024
1 check passed
mzuehlke added a commit to scala-steward-org/scala-steward that referenced this pull request Oct 21, 2024
to prevent pull request like: typelevel/doobie#2120

These libs probably got added since scala-steward-org/sbt-plugin#61
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

3 participants