build: scala-steward dependency updates

[lfdt-bot]

About this PR

Updates:

• 📦 ch.epfl.scala:sbt-scalafix from 0.14.3 to 0.14.6
  • 📜 GitHub Release Notes - Version Diff
• 📦 ch.qos.logback:logback-classic from 1.5.18 to 1.5.32
• 📦 com.apicatalog:titanium-json-ld from 1.6.0 to 1.7.0
• 📦 com.github.jwt-scala:jwt-zio-json from 11.0.2 to 11.0.4
  • 📜 GitHub Release Notes - Version Diff
• 📦 com.github.multiformats:java-multibase from v1.1.1 to v1.2.1
  • 📜 GitHub Release Notes - Version Diff
• 📦 com.h2database:h2 from 2.2.224 to 2.4.240
• 📦 com.jayway.jsonpath:json-path from 2.9.0 to 2.10.0
• 📦 com.typesafe:config from 1.4.4 to 1.4.8
  • 📜 GitHub Release Notes - Version Diff
• 📦 commons-logging:commons-logging from 1.3.5 to 1.3.6
• 📦 io.github.jopenlibs:vault-java-driver from 6.2.0 to 6.2.1
  • 📜 GitHub Release Notes - Version Diff
• 📦 io.micrometer:micrometer-core from 1.15.2 to 1.15.11
  • 📜 GitHub Release Notes - Version Diff
• 📦 org.scala-lang:scala3-library from 3.3.5 to 3.3.7
  • 📜 GitHub Release Notes - Version Diff
• 📦 org.scalatest:scalatest from 3.2.19 to 3.2.20
  • 📜 GitHub Release Notes - Version Diff
• 📦 org.scodec:scodec-bits from 1.2.4 to 1.2.5
  • 📜 GitHub Release Notes - Version Diff
• 📦 org.slf4j:slf4j-api from 2.0.17 to 2.0.18

Usage

✅ Please merge!

I'll automatically update this PR to resolve conflicts as long as you don't change it yourself.

If you have any feedback, just mention me in the comments below.

Configure Scala Steward for your repository with a .scala-steward.conf file.

Have a fantastic day writing Scala!

🔍 Files still referring to the old version numbers

The following files still refer to the old version numbers.
You might want to review and update them manually.

DEPENDENCIES.md
CHANGELOG.md
package-lock.json
tests/performance-tests/agent-performance-tests-k6/yarn.lock
.github/workflows/build.yml
.github/workflows/integration-tests.yml
.github/workflows/performance-tests.yml
.github/workflows/unit-tests.yml
build.sbt
cloud-agent/client/kotlin/build.gradle.kts
cloud-agent/client/generator/yarn.lock
cloud-agent/client/typescript/package.json
tests/performance-tests/agent-performance-tests-k6/package.json
docs/docusaurus/credentials/oid4vci/issue.md

⚙ Adjust future updates

Add these to your .scala-steward.conf file to ignore future updates of these dependencies:

updates.ignore = [
  { groupId = "ch.epfl.scala", artifactId = "sbt-scalafix" },
  { groupId = "ch.qos.logback", artifactId = "logback-classic" },
  { groupId = "com.apicatalog", artifactId = "titanium-json-ld" },
  { groupId = "com.github.jwt-scala", artifactId = "jwt-zio-json" },
  { groupId = "com.github.multiformats", artifactId = "java-multibase" },
  { groupId = "com.h2database", artifactId = "h2" },
  { groupId = "com.jayway.jsonpath", artifactId = "json-path" },
  { groupId = "com.typesafe", artifactId = "config" },
  { groupId = "commons-logging", artifactId = "commons-logging" },
  { groupId = "io.github.jopenlibs", artifactId = "vault-java-driver" },
  { groupId = "io.micrometer", artifactId = "micrometer-core" },
  { groupId = "org.scala-lang", artifactId = "scala3-library" },
  { groupId = "org.scalatest", artifactId = "scalatest" },
  { groupId = "org.scodec", artifactId = "scodec-bits" },
  { groupId = "org.slf4j", artifactId = "slf4j-api" }
]

Or, add these to slow down future updates of these dependencies:

dependencyOverrides = [
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "ch.epfl.scala", artifactId = "sbt-scalafix" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "ch.qos.logback", artifactId = "logback-classic" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "com.apicatalog", artifactId = "titanium-json-ld" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "com.github.jwt-scala", artifactId = "jwt-zio-json" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "com.github.multiformats", artifactId = "java-multibase" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "com.h2database", artifactId = "h2" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "com.jayway.jsonpath", artifactId = "json-path" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "com.typesafe", artifactId = "config" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "commons-logging", artifactId = "commons-logging" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "io.github.jopenlibs", artifactId = "vault-java-driver" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "io.micrometer", artifactId = "micrometer-core" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "org.scala-lang", artifactId = "scala3-library" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "org.scalatest", artifactId = "scalatest" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "org.scodec", artifactId = "scodec-bits" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "org.slf4j", artifactId = "slf4j-api" }
  }
]

^{labels: sbt-plugin-update, library-update, test-library-update, early-semver-minor, semver-spec-patch, early-semver-patch, semver-spec-minor, version-scheme:early-semver, early-semver-major, semver-spec-major, version-scheme:semver-spec, old-version-remains, commit-count:n:15}

[github-actions]

Unit Test Results

0 tests   0 ✅  0s ⏱️
0 suites  0 💤
0 files    0 ❌

Results for commit 38b2005.

♻️ This comment has been updated with latest results.

[yshyn-iohk]

CI is red in Build and unit tests: this grouped update now compiles on Scala 3.3.7 and fails on repository code, including an unused import in pollux/anoncredsTest/PoCNewLib.scala and extension-method toString errors in shared/core Base64UrlString.scala and HexString.scala. Proposed action: treat this PR as too broad and split the Scala/toolchain-related bumps, especially scala3-library, away from the routine library bumps before retrying. - Codex AI agent posting on behalf of @yshyn-iohk

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud

[yshyn-iohk]

Confirming the build break is real and isolated to this PR (it fails only here and on #1791). As diagnosed, it compiles under Scala 3.3.7 and then fails on repository code: an unused import in pollux PoCNewLib.scala and extension-method toString errors in shared/core Base64UrlString.scala and HexString.scala.

Suggestion: split the scala3-library 3.3.5 -> 3.3.7 bump (with the accompanying source fixes) out from the routine library bumps (config, logback, slf4j, micrometer, scodec, etc.), which look safe to land on their own.

_{Reviewed with Claude Code}