diff --git a/.scala-steward.conf b/.scala-steward.conf index 523738c4b0..9f86e31f6e 100644 --- a/.scala-steward.conf +++ b/.scala-steward.conf @@ -1,5 +1,12 @@ +pullRequests.frequency = "@monthly" + commits.message = "bump: ${artifactName} ${nextVersion} (was ${currentVersion})" +updates.ignore = [ + { groupId = "com.typesafe.akka" } +] + updates.pin = [ { groupId = "com.fasterxml.jackson.core", version = "2.15." } + { groupId = "com.fasterxml.jackson.datatype", version = "2.15." } ] diff --git a/project/Dependencies.scala b/project/Dependencies.scala index f43c365294..bfca3a028a 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -63,8 +63,8 @@ object Dependencies { // Releases https://github.com/FasterXML/jackson-databind/releases // CVE issues https://github.com/FasterXML/jackson-databind/issues?utf8=%E2%9C%93&q=+label%3ACVE // This should align with the Jackson minor version used in Akka - // https://github.com/akka/akka/blob/main/project/Dependencies.scala#L29 - val JacksonVersion = "2.15.2" + // https://github.com/akka/akka/blob/main/project/Dependencies.scala#L31 + val JacksonVersion = "2.15.4" val JacksonDatabindVersion = JacksonVersion val JacksonDatabindDependencies = Seq( "com.fasterxml.jackson.core" % "jackson-core" % JacksonVersion,