VulnPulse

Scala Newsの情報

10月12日(月)

  • 07:00リリース・告知ScalaScala News

    Scala 3.10 released!

    Scala 3.10 released! We are happy to announce Scala 3.10.0 , the first release of the new Scala Next series. This release stabilizes SIP-67 , moves three SIPs into preview, and starts dropping legacy language features that have been deprecated for several minor releases. Scala 3.3 LTS and Scala 3.9 LTS put compatibility with Scala 2.13 first. Now, nearly five years after Scala 3.0, Scala 3.10 starts removing legacy syntax and features that have been deprecated for several minor releases. The standard library also starts using more Scala 3 features, such as inline and extension methods. Binary…

10月7日(水)

  • 07:00リリース・告知ScalaScala News

    VirtusLab assumes responsibility for Scala 2 maintenance

    We are happy to announce that VirtusLab has assumed responsibility for maintenance of Scala 2 . This means that VirtusLab, in coordination with the Scala Center and the Scala Core Team, now manages the development of both Scala 2 and Scala 3. Former members of the Scala 2 team at Akka have joined the VirtusLab OSS team, so there will be no impact on Scala 2 maintenance or Scala 2’s future. Our plans for Scala 2 maintenance have long been documented at https://www.scala-lang.org/development/#scala-2-maintenance and the wordings there have not changed. VirtusLab will maintain Scala 2.12 and 2.1…

10月6日(火)

  • 07:00リリース・告知ScalaScala News

    Let's meet in October

    Scala Days 2026 is just around the corner! Next week, on 12 and 13 October , the Scala community will come together at Kulturbrauerei in Berlin for two days of learning, sharing experiences, and catching up with friends and colleagues. The program opens with a keynote by Martin Odersky. There will also be interactive labs, giving you time to explore tools and ideas with their maintainers. Whether you use Scala every day or are getting to know the ecosystem, we look forward to welcoming you. If you’d like to stay a little longer, two-day workshops follow on 14 and 15 October at Hotel Oderberge…

9月16日(水)

  • 07:00リリース・告知ScalaScala News

    Reforesting the sbt plugin ecosystem and sbt 2.1.0 beta

    This post covers work done under the Sovereign Tech Fund investment umbrella: sbt 2 Stable Release and Maintenance . The work is coordinated by the Scala Center . Plugin as an ecosystem Out of the box, sbt handles basic functionality like building and testing Scala code. Once you get used to the basics, the build can be extended further by using community plugins. Plugins range from simple utilities to support for new programming languages. One aspect of a plugin project is that it can be created and developed without waiting for a release of sbt, so it’s a great way to try new ideas or colla…

9月3日(木)

  • 07:00リリース・告知ScalaScala News

    Scala 3.9 LTS released!

    Scala 3.9 LTS released! We are happy to announce Scala 3.9.0 , opening the new Long Term Support line for Scala 3. It succeeds Scala 3.3 LTS as the recommended baseline for library authors and conservative production users, while keeping the Scala Next line available for teams that want the latest language work as soon as it is released. What does LTS mean? Scala 3 follows the Scala LTS and Scala Next model . Scala Next receives regular minor releases with new language features, tooling work, and ecosystem changes. Scala LTS receives patch releases focused on bug fixes, diagnostics, tooling i…

8月10日(月)

  • 07:00リリース・告知ScalaScala News

    Fixing a remote execution vulnerability in sbt

    This post covers work done under the Sovereign Tech Fund investment umbrella: sbt 2 Stable Release and Maintenance . The work is coordinated by the Scala Center . TL;DR Only builds that explicitly set serverConnectionType are affected. You can remove the setting from your build, or upgrade to sbt 1.12.15 / sbt 2.0.6 or later by putting the following in project/build.properties : sbt . version = 1.12 . 15 Note that installing a new sbt command does not affect the sbt version used by each individual build. The vulnerability As part of our ongoing work on the sbt 2 release, we’ve been reviewing…

7月6日(月)

  • 07:00リリース・告知ScalaScala News

    Coaxing quality output from generative AI

    This post covers work done under the Sovereign Tech Fund investment . The work is coordinated by the Scala Center . The work described in this post was done by Bill Venners and Chua Chee Seng of Artima . One of the tasks funded under the STA project is to improve Scala’s API documentation. Such a task looks like a natural fit for generative AI, because the work is repetitive and the code to document is nearby in the source. But handing the work to an AI raises two challenges. The first is quality: an AI model will readily produce documentation, but it may be mediocre or wrong. The second chal…

6月29日(月)

  • 07:00リリース・告知ScalaScala News

    sbt 2 is now available!

    This post covers work done under the Sovereign Tech Fund investment umbrella: sbt 2 Stable Release and Maintenance . The work is coordinated by the Scala Center . After five years of development, sbt 2 is out. Since the experimental sudori part 1 blog post in 2021, more than 82 people have contributed to the project. We would like to thank community and corporate contributors, Scala Center, and Sovereign Tech Fund for their support. What’s new in sbt 2? sbt 2 is a new version of sbt. If you’re familiar with sbt 1.x, hopefully the jump is not too far, but we have pushed sbt to the modern stand…

6月10日(水)

  • 07:00リリース・告知ScalaJavaScala News

    Scala 3.3.8 LTS is now available!

    Scala 3.3.8 LTS is now available! This patch release backports most of the bugfixes and some of the improvements introduced in the Scala Next series to the Scala 3.8.4 release. All of the backported changes were proven to not break either binary or source compatibility, by testing over 1500 projects in the Scala 3 Open Community Build . Notable changes Support for JDK 26 #24430 Multiple coverage improvement to make it on par with Scala 2 support including // $COVERAGE-OFF$ and // $COVERAGE-ON$ markers New @uncheckedOverride annotation for definitions that may override. #24545 Trap Ctrl-C in t…

6月9日(火)

  • 07:00リリース・告知ScalaScala News

    Improving Scala's docs and website

    This post covers work done under the Sovereign Tech Fund investment . The work is coordinated by the Scala Center . We have collected possible documentation tasks from three sources: Tasks in the original proposal we made to the Sovereign Tech Agency Tasks collected in internal discussions since then Tasks from community suggestions on this Contributors forum thread This blog post summarizes what we have collected, identifies tasks that we have chosen to tackle, and describes work that is already underway. Project goals We aim to identify documentation, both API documentation (Scaladoc) and t…

6月5日(金)

  • 07:00リリース・告知ScalaScala News

    Scala 3.8.4 is now available!

    Release highlights Security audit fixes Scala 3.8.4 includes improvements and fixes for issues discovered during the Scala codebase security audit carried out in collaboration with the Open Source Technology Improvement Fund and Quarkslab. Notable fixes in this release include: Hardened TASTy parsing to prevent infinite loops on maliciously crafted files ( #25676 ) Fixed a stored XSS vulnerability in Scaladoc ( #25681 ) Improved error handling in scala.sys.process.Parser.tokenize ( #25675 ) Fixed TastyPrinter’s JAR-walking logic to include subdirectories ( #25678 ) :help syntax for all compil…

6月1日(月)

  • 07:00リリース・告知ScalaScala News

    Scala Codebase Security Audit Complete

    This post covers work done under the Sovereign Tech Fund investment umbrella: Maintenance of the Standard Library/Core Library Modules and APIs . The work is coordinated by the Scala Center . The Scala Center is proud to share the first results of the security audit of Scala carried out in collaboration with Open Source Technology Improvement Fund and the security researchers at Quarkslab . The audit was divided into two major parts: an assessment of the Scala 3 compiler and Scala standard library codebases, and a separate review of Scala’s supply-chain security. This first publication focuse…

4月30日(木)

  • 07:00リリース・告知ScalaScala News

    Scala Days 2026: Call for proposals open

    Scala Days 2026: Call for proposals open Submit your talk https://cfp.scaladays.org/scala26/cfp and be part of Scala Days 2026! The Call for Proposals is now open and will close on May 31, 2026, at 23:59 CEST. The Program Committee is looking for talks, labs, and workshops that showcase how Scala is evolving and delivering value in today’s fast-changing technology landscape. In particular, we’re excited to hear practical insights, real-world experience reports, and forward-looking ideas. See the topics below for inspiration. Kind reminder: Super Early Bird tickets are available only until the…

4月14日(火)

  • 07:00リリース・告知ScalaScala News

    Last mile towards sbt 2

    This post covers work done under the Sovereign Tech Fund investment umbrella: sbt 2 Stable Release and Maintenance . The work is coordinated by the Scala Center . At conferences or on social media, the question we get most often is: When is sbt 2 coming out? We’ll discuss the plan in this post. But let’s go over the status first. What’s new in sbt 2? sbt 2 is a new major version of sbt. If you’re familiar with sbt 1.x, hopefully the jump is not too far, but we have pushed sbt to a more modern standard. The headline features are: sbt 2.x uses Scala 3.x (rather than Scala 2.12) for build defini…

3月31日(火)

  • 07:00リリース・告知ScalaScala News

    Scala 3.8.3 is now available!

    Scala 3.8.3 is now available! Release highlights Local coverage exclusions with // $COVERAGE-OFF$ blocks ( #24486 ) Coverage-instrumented builds can now disable coverage for a selected region of code, instead of excluding a whole file or class. This is useful for generated code, intentionally defensive branches, or support code that would otherwise distort coverage results. //> using scala 3.8.3 //> using options --coverage-out coverage-data class Parser : def parse ( input: String ) : Int = input . toInt // $COVERAGE-OFF$ def debugFallback ( input : String ) : Int = if input == "zero" then 0…

  • 07:00リリース・告知ScalaScala News

    Fixing a Command Injection Vulnerability in sbt

    This post covers work done under the Sovereign Tech Fund investment umbrella: sbt 2 Stable Release and Maintenance . The work is coordinated by the Scala Center . As part of our ongoing work on the sbt 2 release, we’ve been reviewing and hardening core parts of the sbt codebase. During that work, we discovered a command injection vulnerability in how sbt resolves source dependencies on Windows. The issue has been assigned CVE-2026-32948 , rated Moderate (CVSS 6.7), and is now fixed. If you use sbt on Windows, update to sbt 1.12.8 or sbt 2.0.0-RC10 or later to apply the fix. The vulnerability…

3月26日(木)

  • 08:00リリース・告知ScalaScala News

    Announcing Scala Days 2026

    We are very happy to announce that the Scala Days 2026 conference will be taking place 12 - 13 October in Berlin, Germany, one of Europe’s most vibrant tech and open source hubs, known for its strong culture of collaboration and its growing role in advancing digital sovereignty through open technologies. Grab your Super Early Bird ticket and join us in Berlin this autumn! Co-located events Workshops will follow on 14–15 October, with various community-driven, co-located events taking place around the conference, possibly including the preceding weekend. Meet Plain Schwarz For the Scala Days 2…

3月23日(月)

  • 08:00リリース・告知ScalaScala News

    Porting the Scala 2 optimizer to Scala 3

    This post covers work done under the Sovereign Tech Fund investment umbrella: Maintenance of the Standard Library/Core Library Modules and APIs . The work is coordinated by the Scala Center . We are porting the optimizer from the Scala 2 compiler to the Scala 3 compiler, improving the performance of Scala 3 applications without requiring developers to write more complex code. In early microbenchmarks of code written in a high-level functional style, we’re seeing 10-30% faster execution. But what exactly is this optimizer and why is it necessary? This work is available as of version 3.8.3-RC3…

3月11日(水)

  • 08:00リリース・告知ScalaScala News

    Hardening Scoverage Support in Scala 3

    This post covers work done under the Sovereign Tech Fund investment umbrella: Scoverage hardening . The work is coordinated by the Scala Center . Summary Code coverage is a key part of maintaining high-quality Scala projects. We’ve recently made progress on making Scoverage more robust for Scala 3, expanding the way we test it and discovering and fixing new issues. Background Measuring how much of your Scala code is exercised by tests sounds simple until you try to do it yourself. That’s where code coverage tools come in. Code coverage is not optional for many organizations. As one of the QA…

3月2日(月)

  • 08:00リリース・告知ScalaScala News

    Migrating sbt plugins to sbt 2 with sbt2-compat plugin

    This post covers work done under the Sovereign Tech Fund investment umbrella: sbt 2 Stable Release and Maintenance . The work is coordinated by the Scala Center . There’s an ongoing, community-driven effort to repopulate the sbt plugin ecosystem in preparation for the sbt 2 release. From sbt 1.x, plugin authors can cross publish against sbt 2.0 release candidates. To facilitate the plugin migration, we’ve created the sbt2-compat plugin . The PluginCompat Pattern sbt 2 is a major upgrade from sbt 1 and makes breaking changes on the API level. As a plugin maintainer, you want to preserve compat…