Third party dependency updates

[flow-tech]

About this PR

Updates:

• 📦 org.scala-lang:scala-reflect from 2.13.16 to 2.13.17
  • 📜 GitHub Release Notes - Version Diff
• 📦 org.scalameta:sbt-scalafmt from 2.5.5 to 2.5.6
  • 📜 GitHub Release Notes - Version Diff

Usage

✅ Please merge!

I'll automatically update this PR to resolve conflicts as long as you don't change it yourself.

If you have any feedback, just mention me in the comments below.

Configure Scala Steward for your repository with a .scala-steward.conf file.

Have a fantastic day writing Scala!

⚙ Adjust future updates

Add these to your .scala-steward.conf file to ignore future updates of these dependencies:

updates.ignore = [
  { groupId = "org.scala-lang", artifactId = "scala-reflect" },
  { groupId = "org.scalameta", artifactId = "sbt-scalafmt" }
]

Or, add these to slow down future updates of these dependencies:

dependencyOverrides = [
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "org.scala-lang", artifactId = "scala-reflect" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "org.scalameta", artifactId = "sbt-scalafmt" }
  }
]

^{labels: scala-steward}

Summary by CodeRabbit

• Chores
  • Bumped Scala toolchain for the project to a newer 2.13.x release for improved compatibility.
  • Updated build plugins (code formatting and coverage tooling) to more recent versions to ensure more reliable formatting and test coverage reporting.

[coderabbitai]

📝 Walkthrough

Walkthrough

Scala and sbt plugin versions were bumped: Scala from 2.13.16 to 2.13.17 in build.sbt; sbt-scalafmt from 2.5.5→2.5.6 and sbt-scoverage from 2.3.1→2.4.0 in project/plugins.sbt. No functional or control-flow changes.

Changes

Cohort / File(s)	Change Summary
Scala version build.sbt	Updated scalaVersion from 2.13.16 to 2.13.17.
sbt plugins project/plugins.sbt	Updated sbt-scalafmt from 2.5.5 → 2.5.6 and sbt-scoverage from 2.3.1 → 2.4.0.

Estimated code review effort

🎯 1 (Trivial) | ⏱️ ~2 minutes

• Pay attention to compatibility of plugin versions with sbt/Scala if the CI/build manifests issues.

Suggested labels

auto-merge

Suggested reviewers

• jackl
• github-actions

Pre-merge checks

✅ Passed checks (2 passed)

Check name	Status	Explanation
Description Check	✅ Passed	Check skipped - CodeRabbit’s high-level summary is enabled.
Title check	✅ Passed	The pull request title 'Third party dependency updates' directly and accurately summarizes the main change in the changeset. The raw summary confirms that all modifications are version updates to third-party dependencies: scalaVersion (2.13.16 → 2.13.17), sbt-scalafmt (2.5.5 → 2.5.6), and sbt-scoverage (2.3.1 → 2.4.0). The title is concise, clear, and appropriately captures the primary purpose of the changeset.

---

_{Comment @coderabbitai help to get the list of available commands and usage tips.}

[flow-tech]

Click here for code coverage report: https://jenkins.flo.pub/job/flowcommerce/job/lib-util/job/PR-257/3/scoverage-report/

[coderabbitai]

Actionable comments posted: 1

📜 Review details

Configuration used: CodeRabbit UI

Review profile: CHILL

Plan: Pro

📥 Commits

Reviewing files that changed from the base of the PR and between 6a9faae and dde0951.

📒 Files selected for processing (1)

• project/plugins.sbt (1 hunks)

⏰ Context from checks skipped due to timeout of 90000ms. You can increase the timeout in your CodeRabbit configuration to a maximum of 15 minutes (900000ms). (1)

• GitHub Check: Jenkins

🔇 Additional comments (2)

project/plugins.sbt (2)

9-9: PR description is incomplete.

The PR description mentions only two dependency updates (scala-reflect and sbt-scalafmt), but the actual changes include a third update: sbt-scoverage from 2.3.1 to 2.4.0. Please update the PR description to accurately reflect all dependency changes.

---

8-8: Review breaking changes in sbt-scalafmt 2.5.6 and verify sbt-scoverage 2.4.0 version stability.

sbt-scalafmt 2.5.6 exists and has no known security vulnerabilities, but the update includes behavior-changing items: scalafmt was bumped to 3.10.0 (affecting formatting output), and there are changes for sbt 2.0.0-RC6 support with deprecated OSS resolvers removed. Verify that your project's formatting and sbt configuration are compatible with these changes.

Additionally, sbt-scoverage 2.4.0 exists in Maven Central but has no official GitHub release or tag; the latest documented release is 2.3.1. Confirm this version is intentional and stable before merging.