Update dependency com.github.sbt:sbt-pgp to v2.3.1

[renovate]

This PR contains the following updates:

Package	Type	Update	Change
com.github.sbt:sbt-pgp	plugin	minor	2.2.0-M2 → 2.3.1

---

Release Notes

sbt/sbt-pgp (com.github.sbt:sbt-pgp)

v2.3.1: 2.3.1

Compare Source

sbt-pgp 2.3.1 is cross published to:

sbt Version	Published
1.x	✅
2.x	✅

about sbt-pgp

sbt-pgp is an sbt plugin, originally developed in 2011 by Josh Suereth, to sign artifacts for Maven Central publishing. Since sbt-pgp 2.x we use GnuPG by default.

updates

• deps: Update Bouncy Castle to 1.78.1 by @​urwithsumit in #​216
  • CVE-2024-30172
  • CVE-2023-33201
  • CVE-2024-29857
  • CVE-2024-30171
  • CVE-2023-33202

behind the scene

• refactor: Use Iterator instead of deprecated Stream by @​xuwei-k in #​215
• ci: setup-sbt by @​eed3si9n in #​217
• ci: Use sbt 1.10.6 for sbt 1.x scripted tests by @​eed3si9n in #​218

new contributors

• @​urwithsumit made their first contribution in #​216

Full Changelog: sbt/sbt-pgp@v2.3.0...v2.3.1

v2.3.0: 2.3.0

Compare Source

sbt-pgp 2.3.0 is cross published to:

sbt Version	Published
1.x	✅
2.0.0-M2	✅

sbt 2.x migration

• Adds Scala 3 build setting for gpg-library by @​xuwei-k in #​208
• Cross build to sbt 2.x by @​eed3si9n in #​214
• Prepare Scala 3, sbt 2 build by @​xuwei-k in #​205
• Uses slash syntax in test. prepare sbt 2 by @​xuwei-k in #​213

behind the scenes

• Remove unused imports by @​xuwei-k in #​212
• Delete scala-sbt-0.13/Compat.scala by @​xuwei-k in #​206
• Avoid deprecated java.net.URL constructor by @​xuwei-k in #​204
• Update specs2 by @​xuwei-k in #​207
• Add dependabot for github-actions by @​xuwei-k in #​209
• Bump actions/setup-java from 3 to 4 by @​dependabot in #​211
• Bump actions/checkout from 3 to 4 by @​dependabot in #​210
• Readme by @​eed3si9n in #​201
• Fix typo in readme by @​SethTisue in #​202

new contributors

• @​SethTisue made their first contribution in #​202
• @​dependabot made their first contribution in #​211

Full Changelog: sbt/sbt-pgp@v2.2.1...v2.3.0

v2.2.1: 2.2.1

Compare Source

bug fix

• Pass in --yes to GnuPG CLI during signing by @​eed3si9n in #​200

behind the scene

• Update CI by @​eed3si9n in #​198

Full Changelog: sbt/sbt-pgp@v2.2.0...v2.2.1

v2.2.0: 2.2.0

Compare Source

What's Changed

• Fixes 'gpg: invalid option "--pinentry-mode"' on GPG 2.0 by @​winitzki in #​197
• Fixes many typos by @​xuwei-k in #​189
• Updates dependencies by @​xuwei-k in #​193
• Adds testcase by @​CTiPKA in #​194
• Uses slash syntax by @​xuwei-k in #​190 and @​eed3si9n in #​196

New Contributors

• @​CTiPKA made their first contribution in #​194
• @​winitzki made their first contribution in #​197

Full Changelog: sbt/sbt-pgp@v2.1.2...v2.2.0

---

Configuration

📅 Schedule: (UTC)

• Branch creation
  • At any time (no schedule defined)
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[renovate]

Renovate Ignore Notification

Because you closed this PR without merging, Renovate will ignore this update (2.3.1). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the ignoreDeps array of your Renovate config.

If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.