https://github.com/sbt/sbt/releases/tag/v1.5.6

https://github.com/sbt/sbt/releases/tag/v1.5.7

sbt 1.5.6 updates log4j 2 to 2.15.0, which fixes remote code execution vulnerability (CVE-2021-44228)
This commit is contained in:
sullis 2021-12-20 06:31:09 -08:00 коммит произвёл GitHub
Родитель 653a49c20c
Коммит 910e6dd974
Не найден ключ, соответствующий данной подписи
Идентификатор ключа GPG: 4AEE18F83AFDEB23
2 изменённых файлов: 4 добавлений и 4 удалений

Просмотреть файл

@ -1,10 +1,10 @@
# This Dockerfile has two required ARGs to determine which base image # This Dockerfile has two required ARGs to determine which base image
# to use for the JDK and which sbt version to install. # to use for the JDK and which sbt version to install.
ARG OPENJDK_TAG=8u232 ARG OPENJDK_TAG=8u292
FROM openjdk:${OPENJDK_TAG} FROM openjdk:${OPENJDK_TAG}
ARG SBT_VERSION=1.4.9 ARG SBT_VERSION=1.5.7
# Install sbt # Install sbt
RUN \ RUN \

Просмотреть файл

@ -28,7 +28,7 @@ local caches as volumes and set the working directory as well:
To build, you need to specify the desired openjdk and sbt versions via To build, you need to specify the desired openjdk and sbt versions via
`--build-arg` parameters: `--build-arg` parameters:
docker build --build-arg OPENJDK_TAG=8u292 --build-arg SBT_VERSION=1.5.4 . docker build --build-arg OPENJDK_TAG=8u292 --build-arg SBT_VERSION=1.5.7 .
## Pushing a new tag to DockerHub ## Pushing a new tag to DockerHub
@ -42,7 +42,7 @@ Then use the following recipe to build and push:
```bash ```bash
OPENJDK_TAG=8u292 OPENJDK_TAG=8u292
SBT_VERSION=1.5.4 SBT_VERSION=1.5.7
docker build \ docker build \
--build-arg OPENJDK_TAG=$OPENJDK_TAG \ --build-arg OPENJDK_TAG=$OPENJDK_TAG \