Access sbt changelog updates through our uniform API. Same JSON structure across all sources — no adapter-specific parsing needed.
GET https://watchchangelog.com/api/v1/entries?source=sbt.releases{
"source": "sbt.releases",
"vendor": "sbt",
"id": "tag:github.com,2008:Repository/279553/v1.13.0",
"published_at": "2026-08-21T03:18:37.000Z",
"title": "1.13.0",
"url": "https://github.com/sbt/sbt/releases/tag/v1.13.0",
"summary": "⚠️ Remote code execution vulnerability fix sbt team received a security report GHSA-943m-f264-54p4 from @stasimus that when the serverConnectionType is set to Tcp , an attacker is able to execute arbitrary code remotely via BSP, similar to a recent bug that was found in JSON-RPC. sbt 1.13.0 and 2.0.7 fix this bug. Builds with the default serverConnectionType are not affected. In affected builds, we recommend removing the serverConnectionType setting, or upgrading to a patched version or later. In an affected build, the setting might look like this: Global / serverConnectionType := ConnectionType . Tcp The remediation was implemented by @stasimus . 🚀 updates Scala 3.9 REPL support by @Gedochao in #9564 IO.jarParallel and IO.zipParallel by @hoangmaihuy in sbt/io#540 🐛 bug fixes fix: Avoid rewriting unchanged plugin descriptors by @unkarjedy in #9613 fix: Fixes -V parsing in sbt runners by @anatoliykmetyuk in #9626 behind the scenes ci: Remove cla-checker v1 by @eed3si9n in #9572 Update sbtn to 2.0.0-8753a981 by @eed3si9n in #9635 Bump IO to 1.13.0 by @eed3si9n in #9648 new contributors @Gedochao made their first contribution in #9564 Full Changelog : v1.12.15...v1.13.0",
"tags": [
"sbt",
"sbt.releases",
"build-tool",
"scala",
"java"
]
}Sign up to access the full changelog API. All public sources are free — no credit card required.
Sign Up Free →+2 more
+2 more
+2 more
+2 more
+2 more