Merge pull request #403 from guardian/update/non_aws

chore(deps): Non-AWS dependency updates

build.sbt

@@ -1,5 +1,5 @@
 // https://github.com/orgs/playframework/discussions/11222
-val jacksonVersion         = "2.14.2"
+val jacksonVersion         = "2.16.0"
 
 val jacksonOverrides = Seq(
   "com.fasterxml.jackson.datatype" % "jackson-datatype-jdk8",
@@ -19,7 +19,7 @@ lazy val root = (project in file("."))
   .settings(
     name := """cdk-playground""",
     version := "1.0-SNAPSHOT",
-    scalaVersion := "2.13.10",
+    scalaVersion := "2.13.12",
     scalacOptions ++= List(
       "-encoding", "utf8",
       "-deprecation",
@@ -36,9 +36,9 @@ lazy val root = (project in file("."))
     libraryDependencies ++= jacksonOverrides
       ++ akkaSerializationJacksonOverrides
       ++ Seq(
-        "net.logstash.logback" % "logstash-logback-encoder" % "7.3",
+        "net.logstash.logback" % "logstash-logback-encoder" % "7.4",
         // Transient dependency of Play. No newer version of Play 2.9 or Play 3.0 with this vulnerability fixed.
-        "ch.qos.logback" % "logback-classic" % "1.2.13",
+        "ch.qos.logback" % "logback-classic" % "1.4.14",
       ),
 
     buildInfoKeys ++= Seq[BuildInfoKey](

conf/application.conf

@@ -1,2 +1,2 @@
 play.application.loader= AppLoader
-play.http.secret.key = "this is not a production system"
+play.http.secret.key = "this is not a production system, so it doesn't matter too much that this is plain text"

project/build.properties

@@ -1 +1 @@
-sbt.version=1.6.2
+sbt.version=1.9.7

project/plugins.sbt

@@ -1,4 +1,4 @@
-addSbtPlugin("com.typesafe.play" % "sbt-plugin" % "2.8.16")
+addSbtPlugin("com.typesafe.play" % "sbt-plugin" % "2.9.0")
 addSbtPlugin("com.eed3si9n" % "sbt-buildinfo" % "0.11.0")
 
-libraryDependencies += "org.vafer" % "jdeb" % "1.8" artifacts Artifact("jdeb", "jar", "jar")
+libraryDependencies += "org.vafer" % "jdeb" % "1.10" artifacts Artifact("jdeb", "jar", "jar")