build(deps): bump the sbt group across 1 directory with 6 updates

[dependabot]

Bumps the sbt group with 6 updates in the / directory:

Package	From	To
io.netty:netty-tcnative-boringssl-static	2.0.74.Final	2.0.81.Final
org.apache.httpcomponents.client5:httpclient5	5.4.2	5.6.3
com.eed3si9n:sbt-assembly	2.3.1	2.4.1
org.scalameta:sbt-scalafmt	2.6.0	2.6.2
org.scala-sbt:sbt	1.12.9	2.0.4
org.scala-lang:scala3-library_3	3.8.3	3.8.4

Updates io.netty:netty-tcnative-boringssl-static from 2.0.74.Final to 2.0.81.Final

Commits

• 402d9c3 [maven-release-plugin] prepare release netty-tcnative-parent-2.0.81.Final
• f44fcb9 Add SSL.getGroupName(...) which returns the name of the used by ssl's most re...
• 81ca0c5 [maven-release-plugin] prepare for next development iteration
• d6bed2e [maven-release-plugin] prepare release netty-tcnative-parent-2.0.80.Final
• 185daef Fix linux-x86_64 openssl-dynamic to link against OpenSSL 3.x (#989)
• aa6efe4 [maven-release-plugin] prepare for next development iteration
• f79687e [maven-release-plugin] prepare release netty-tcnative-parent-2.0.79.Final
• 47fda99 linux aarch_64 openssl-dynamic link to openssl3.x (#986)
• a85010b Drop checks on SSL_CREDENTIAL support for older BoringSSL (#980)
• 02d0d03 Clear certificate chain in setKeyMaterial. (#987)
• Additional commits viewable in compare view

Updates org.apache.httpcomponents.client5:httpclient5 from 5.4.2 to 5.6.3

Changelog

Sourced from org.apache.httpcomponents.client5:httpclient5's changelog.

Release 5.6.3

This maintenance release fixes a resource management defect in the content decompression protocol handler of the classic transport.

Change Log

• ContentCompressionExec fails to close the underlying response stream in case of an unexpected runtime or protocol exception. Contributed by Oleg Kalnichevski

• Do not call the backend when an only-if-cached request cannot be served from cache (RFC 9111 5.2.1.7). Contributed by hunghh.dev <hunghh.dev at gmail.com>

• Include the request scheme in redirect same-authority check. Contributed by Javid Khan

• Escape quotes and strip line breaks in RFC 7578 multipart parameters. Contributed by Javid Khan

• HTTPCLIENT-2426: Do not wrap a discarded (null) response body in a content decoder. Contributed by Arturo Bernal

Release 5.6.2

This maintenance release upgrades HttpCore to the latest stable version and restores lazy content decompression by the classic client transport.

Change Log

• Upgraded HttpCore to version 5.4.3. Contributed by Oleg Kalnichevski

• HTTPCLIENT-2422: Restore lazy content decompression. Defer construction of the decompression stream until the response content is actually read. Contributed by Arturo Bernal

Release 5.6.1

This maintenance release disables experimental SCRAM auth scheme by default and fixes SCRAM final response handling. The SCRAM auth scheme can be re-enabled by choosing a custom auth scheme preference sequence that explicitly includes SCRAM auth.

... (truncated)

Commits

• 13408e3 HttpClient 5.6.3 release
• 58728b1 Updated release notes for HttpClient 5.6.3 release
• 55733f4 ContentCompressionExec fails to close the underlying response stream in case ...
• 2485ddf Do not call the backend when an only-if-cached request cannot be served from ...
• 26ece37 compare scheme in redirect same-authority check
• 8cdf6fa escape quotes and strip line breaks in rfc7578 multipart parameters
• ab20c86 HTTPCLIENT-2426: Do not wrap a discarded (null) response body in a content de...
• f092f56 Upgraded HttpClient version to 5.6.3-SNAPSHOT
• a7405cd Updated release notes for HttpClient 5.6.2 release
• bb51196 Upgraded HttpCore to version 5.4.3
• Additional commits viewable in compare view

Updates com.eed3si9n:sbt-assembly from 2.3.1 to 2.4.1

Updates org.scalameta:sbt-scalafmt from 2.6.0 to 2.6.2

Updates org.scala-sbt:sbt from 1.12.9 to 2.0.4

Release notes

Sourced from org.scala-sbt:sbt's releases.

2.0.4

changes with compatibility implications

• fix: Forked run uses working directory by @​jozanek in sbt/sbt#9442

🐛 bug fixes

• fix: Fixes test ClassLoader retention issues by @​kevin-lee in sbt/sbt#9485
• fix: Fixes common settings with a plugin with extraProjects by @​eed3si9n in sbt/sbt#9495
• fix: Fixes dependency tree rendering on some libraries by @​anatoliykmetyuk in sbt/sbt#9371
• fix: Fixes tests not detecting stale resources by @​eed3si9n in sbt/sbt#9469
• fix: Fixes sbtn not propagating -java-home by @​BrianHotopp in sbt/sbt#9448
• fix: Fixes clean task not cleaning sona-staging by @​eed3si9n in sbt/sbt#9479
• fix: Fixes reboot from sbtn by @​BrianHotopp in sbt/sbt#9497

🐛 caching related bug fixes

• fix: Fixes hashes for directories in MappedVirtualFile by @​raboof in sbt/zinc#1747
• fix: Fixes Def.declareOutput invoked in a loop by @​BrianHotopp in sbt/sbt#9492
• fix: Fixes partial cache restoration by @​stasimus in sbt/sbt#9488
• fix: Fixes system errors getting cached as compilation errors by @​BrianHotopp in sbt/sbt#9464
• fix: Improves cache restoration when the expected outputs are missing by @​BrianHotopp in sbt/sbt#9473
• fix: Fixes gRPC channels recreated on reload by @​eed3si9n in sbt/sbt#9502
• fix: Fixes scalaCompilerBridgeBin task leaking project name by @​eed3si9n in sbt/sbt#9506
• refactor: Separate file I/O from cache-write serialization by @​BrianHotopp in sbt/sbt#9496

🚀 updates

• feat: Skip checksum generation for *.asc file during publishing by @​eed3si9n in sbt/sbt#9499
• feat: Move compiler bridge to update by @​eed3si9n in sbt/sbt#8836
• feat: Allow opt-out of transient warning by @​eed3si9n in sbt/sbt#9437
• perf: Intern directory item conversions in MappedFileConverter by @​hoangmaihuy in sbt/zinc#1751
• perf: Intern analysis values while deserializing by @​hoangmaihuy in sbt/zinc#1754

behind the scenes

• Update Zinc to 2.0.4 by @​eed3si9n in sbt/sbt#9508
• Update sbtn to 2.0.0-a0c4773a by eed3si9n in sbt/sbt#9503

Full Changelog: sbt/sbt@v2.0.3...v2.0.4

2.0.3

🐛 bug fixes

• fix: Backports the packager cache fix for CVE-2026-26032 by @​raboof in sbt/ivy#57
• deps: sjson-new 0.15.1, which transitively updates Jawn to 1.7.0 for GHSA-cc4v-rvgp-2pf3 and GHSA-w4cm-gvhj-cgw6 by @​eed3si9n in sbt/sbt#9458
• fix: Fixes JVM option capability in the launcher config by @​anatoliykmetyuk in sbt/sbt#9452

Full Changelog: sbt/sbt@v2.0.2...v2.0.3

... (truncated)

Commits

• 837ad17 sbt 2.0.4
• e36dbf8 Merge pull request #9509 from eed3si9n/bport2/backports
• e4f3e7f [2.x] Zinc 2.0.4 (#9508)
• ff2a76e [2.0.x] fix: Make forked run inherit sbt's working directory (#9442)
• 3155bde [2.0.x] fix: Fixes scalaCompilerBridgeBin (#9506)
• 30f573f [2.0.x] Move compiler bridge to Update
• 8266803 [2.0.x] fix: Complete server teardown before logging so reboot works from sbt...
• aacbf73 Add remote-cache test
• aed2719 [2.x] fix: Intern GrpcActionCacheStore
• 6ea3eb7 [2.0.x] sbtn 2.0.0-a0c4773a (#9503)
• Additional commits viewable in compare view

Updates org.scala-lang:scala3-library_3 from 3.8.3 to 3.8.4

Release notes

Sourced from org.scala-lang:scala3-library_3's releases.

3.8.4

Highlights of the release

• Allow :help syntax for all settings #26052
• feature: Add logical package parsing for sourcepath #25446
• Upgrade Scala CLI to 1.14.0
  • https://github.com/VirtusLab/scala-cli/releases/tag/v1.12.5
    • --cross support for run, package and doc sub-commands (experimental)
    • Global --offline config key
    • Local .m2 in publish local (experimental)
  • https://github.com/VirtusLab/scala-cli/releases/tag/v1.13.0
    • Support for Scala.js 1.21.0
    • Ammonite REPL deprecated & scheduled for removal
    • java-test-runner for pure Java tests
    • GraalVM native-image packaging: packaging.graalvmJvmId and packaging.graalvmArgs
  • https://github.com/VirtusLab/scala-cli/releases/tag/v1.14.0
    • Support for .test.java
    • A toggle to turn auto-IDE-setup off

Other changes and fixes

Annotations

• Also copy param annots at mixin #24916
• Named arg may be deprecatedName #21588
• Use dealiasKeepRefiningAnnots in AvoidMap #25609

Backend

• Do not simplify isInstanceOf if unrelated types might be subtypes at run-time #25535
• Port more Scala2 tests + some mixin improvements #25573
• Use Objects.equals in translating == #25314

Compiler Phases

• Harden Period creation and use of Run/PhaseId #25484
• Make Phase.run protected #25366

Context Functions

• Fix crash when processing path dependent context functions using HKTs #25530

Coverage

• Fix #25555: Preserve singleton precision during scoverage lifting #25556
• Fixes #25482: Ensure package transformation properly handles language imports in InstrumentCoverage #25546
• Scoverage: do not instrument erased values. #25298

Default parameters

... (truncated)

Commits

• 7d4833b Release Scala 3.8.4
• 685ef3f Add changelog for Scala 3.8.4
• 93994ec Release Scala 3.8.4-RC3
• 73dada9 Add changelog for 3.8.4-RC3
• 0ff65de Fix extractions of release version tag
• 789ae26 bugfix: Fix all tasty files in a jar
• fb5c1be Backport "Do not overwrite the supertype of non-trait super in Erasure" to 3....
• bddb87c Backport "Make type arguments to default methods InferredTypeTrees" to 3.8.4 ...
• 3664319 Backport "feature: Improve the logical sources provider" to 3.8.4 (#26107)
• e627edd Backport "Bump Scala CLI to v1.14.0 (was v1.13.0)" to 3.8.4 (#26106)
• Additional commits viewable in compare view