Patch updates

[gu-scala-steward-public-repos]

About this PR

Updates:

• 📦 com.google.guava:guava from 32.1.1-jre to 32.1.3-jre
• 📦 com.typesafe.play:play from 2.9.4 to 2.9.10
  • 📜 GitHub Release Notes - Version Diff
• 📦 io.gatling:gatling-test-framework from 3.7.2 to 3.7.6
  • 📜 GitHub Release Notes - Version Diff
• 📦 io.gatling.highcharts:gatling-charts-highcharts from 3.7.2 to 3.7.6
  • 📜 GitHub Release Notes - Version Diff
• 📦 org.apache.opennlp:opennlp from 2.1.0 to 2.1.1
• 📦 org.carrot2:morfologik-tools from 2.1.7 to 2.1.9
• 📦 org.mockito:mockito-scala-scalatest from 1.17.30 to 1.17.45
  • 📜 GitHub Release Notes - Version Diff
• 📦 org.postgresql:postgresql from 42.5.5 to 42.5.6
  • 📜 Changelog
• 📦 org.scalameta:scalafmt-core from 3.7.2 to 3.7.17
  • 📜 GitHub Release Notes - Version Diff
• 📦 org.scalatestplus.play:scalatestplus-play from 6.0.1 to 6.0.2
  • 📜 GitHub Release Notes - Version Diff

Usage

✅ Please merge!

I'll automatically update this PR to resolve conflicts as long as you don't change it yourself.

If you have any feedback, just mention me in the comments below.

Configure Scala Steward for your repository with a .scala-steward.conf file.

Have a fantastic day writing Scala!

🔍 Files still referring to the old version numbers

The following files still refer to the old version numbers.
You might want to review and update them manually.

apps/rule-manager/client/package-lock.json
cdk/yarn.lock
script/js/yarn.lock

⚙ Adjust future updates

Add these to your .scala-steward.conf file to ignore future updates of these dependencies:

updates.ignore = [
  { groupId = "com.google.guava", artifactId = "guava" },
  { groupId = "com.typesafe.play", artifactId = "play" },
  { groupId = "io.gatling", artifactId = "gatling-test-framework" },
  { groupId = "io.gatling.highcharts", artifactId = "gatling-charts-highcharts" },
  { groupId = "org.apache.opennlp", artifactId = "opennlp" },
  { groupId = "org.carrot2", artifactId = "morfologik-tools" },
  { groupId = "org.mockito", artifactId = "mockito-scala-scalatest" },
  { groupId = "org.postgresql", artifactId = "postgresql" },
  { groupId = "org.scalameta", artifactId = "scalafmt-core" },
  { groupId = "org.scalatestplus.play", artifactId = "scalatestplus-play" }
]

Or, add these to slow down future updates of these dependencies:

dependencyOverrides = [
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "com.google.guava", artifactId = "guava" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "com.typesafe.play", artifactId = "play" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "io.gatling", artifactId = "gatling-test-framework" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "io.gatling.highcharts", artifactId = "gatling-charts-highcharts" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "org.apache.opennlp", artifactId = "opennlp" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "org.carrot2", artifactId = "morfologik-tools" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "org.mockito", artifactId = "mockito-scala-scalatest" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "org.postgresql", artifactId = "postgresql" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "org.scalameta", artifactId = "scalafmt-core" }
  },
  {
    pullRequests = { frequency = "30 days" },
    dependency = { groupId = "org.scalatestplus.play", artifactId = "scalatestplus-play" }
  }
]

^{labels: dependencies}

[emdash-ie]

I’ve pulled in the sbt-scalafmt plugin update from #566 because I think it might fix the CI failure

[github-actions]

Deploy build 2941 of Editorial Tools::Typerighter to CODE

All deployment options

• Deploy build 2941 of Editorial Tools::Typerighter to CODE
• Deploy parts of build 2941 to CODE by previewing it first
• What's on CODE right now?

---

From guardian/actions-riff-raff.

[emdash-ie]

I plan to merge this on Tuesday and watch PROD once it’s out to make sure nothing has broken. If anyone wants to beat me to it tomorrow or Monday please go for it!