Update dependency com.typesafe.play:play-json_2.12 to v2.10.8

[renovate]

Note: This PR body was truncated due to platform limits.

This PR contains the following updates:

Package	Change	Age	Confidence
com.typesafe.play:play-json_2.12	2.6.0-M5 → 2.10.8

---

Warning

Some dependencies could not be looked up. Check the Dependency Dashboard for more information.

---

Release Notes

playframework/play-json (com.typesafe.play:play-json_2.12)

v2.10.8: Play JSON 2.10.8

Compare Source

Noteworthy improvements

• #​1226 [2.10.x] Avoid running out of memory when parsing heavily nested arrays or objects by @​mkurz
  • We now limit the maximum allowed nesting depth of JSON structures (arrays, objects, or a mix of both) to 1000.
    This limit can be adjusted using the system property play.json.parser.maxNestingDepth.
    We assume a depth of 1000 should be more than sufficient for virtually all real-world use cases.
    
    This change helps prevent both potential OutOfMemoryErrors and StackOverflowErrors.
    The latter, however, is not a concern for Play JSON, since it already uses a @tailrec-optimized parsing method.
    As a result, Play JSON is not affected by CVE-2025-52999, which specifically addresses StackOverflowError risks.
    This improvement is simply an additional safety measure.

Changes

• #​1232 [2.10.x] Patch updates by @​mkurz
• #​1230 [2.10.x] Fix flaky tests (backport #​1229) by @​mkurz by @​mergify[bot]
• #​1226 [2.10.x] Avoid running out of memory when parsing heavily nested arrays or objects by @​mkurz
• #​1223 [2.10.x] sbt-jmh 0.4.8 (was 0.4.7) by @​scala-steward
• #​1218 [2.10.x] sbt-header 5.11.0 (was 5.10.0) by @​scala-steward
• #​1214 [2.10.x] Patch updates by @​mkurz
• #​1209 [2.10.x] Bump actions/checkout from 4 to 5 by @​dependabot[bot]
• #​1200 [2.10.x] Patch updates by @​mkurz
• #​1197 [2.10.x] Remove frequency from scala steward conf (backport #​1143) by @​mkurz by @​mergify[bot]
• #​1194 [2.10.x] Patch updates by @​mkurz
• #​1164 [2.10.x] sbt-ci-release 1.11.1 (was 1.9.3) by @​scala-steward
• #​1165 [2.10.x] sbt, scripted-plugin 1.11.2 (was 1.10.11) by @​scala-steward

❤️ Thanks to our premium sponsors!

If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor.
You can also individually sponsor the project by becoming a backer.

🙇 Thanks to our contributors

Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors.
Special thanks to all code contributors who helped with this particular release (they are listed below)!

v2.10.7: Play JSON 2.10.7

Compare Source

Noteworthy Scala 3 improvements

• #​1178 [2.10.x] fix field ordering Scala 3 writes macro (backport #​1172) by @​xuwei-k by @​mergify[bot]

Changes

• #​1185 [2.10.x] Patch updates by @​mkurz
• #​1182 [2.10.x] Add test for field ordering (backport #​1042) by @​levinson by @​mergify[bot]
• #​1178 [2.10.x] fix field ordering Scala 3 writes macro (backport #​1172) by @​xuwei-k by @​mergify[bot]
• #​1166 [2.10.x] Patch updates by @​scala-steward
• #​1152 [2.10.x] Patch updates by @​scala-steward
• #​1144 [2.10.x] Patch updates by @​scala-steward
• #​1134 [2.10.x] Patch updates by @​scala-steward
• #​1133 [2.10.x] scalafmt-core 3.9.3 (was 3.8.6) by @​scala-steward
• #​1124 [2.10.x] Patch updates by @​scala-steward
• #​1117 [2.10.x] Patch updates by @​scala-steward
• #​1115 [2.10.x] Fix Dependency Graph action (backport #​1114) by @​ihostage by @​mergify[bot]
• #​1110 [2.10.x] Patch updates by @​scala-steward
• #​1098 [2.10.x] Pin joda-time by @​mkurz
• #​1095 [2.10.x] Patch updates by @​mkurz
• #​1079 [2.10.x] Patch updates by @​scala-steward
• #​1087 [2.10.x] sbt-ci-release 1.9.0 (was 1.6.1) by @​scala-steward
• #​1068 [2.10.x] Patch updates by @​scala-steward
• #​1067 [2.10.x] sbt-ci-release 1.6.1 (was 1.5.12) by @​scala-steward
• #​1063 [2.10.x] Patch updates by @​scala-steward
• #​1053 [2.10.x] Patch updates by @​scala-steward

❤️ Thanks to our premium sponsors!

If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor.
You can also individually sponsor the project by becoming a backer.

🙇 Thanks to our contributors

Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors.
Special thanks to all code contributors who helped with this particular release (they are listed below)!

v2.10.6: Play JSON 2.10.6

Compare Source

Changes

• #​1052 [2.10.x] Make format generation idempotent (backport #​1047) by @​reimai
• #​1051 [2.10.x] Patch updates by @​mkurz
• #​1045 [2.10.x] sbt 1.10.0 (was 1.9.9) by @​scala-steward
• #​1046 [2.10.x] Patch updates by @​scala-steward
• #​1044 [2.10.x] Bump scalacenter/sbt-dependency-submission from 2 to 3 by @​dependabot
• #​1034 [2.10.x] Run tests on Java 21 (backport #​968) by @​mkurz
• #​1030 [2.10.x] Patch updates by @​mkurz
• #​1027 [2.10.x] Pin dependencies in Scala steward by @​mkurz

❤️ Thanks to our premium sponsors!

If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor.
You can also individually sponsor the project by becoming a backer.

🙇 Thanks to our contributors

Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors.
Special thanks to all code contributors who helped with this particular release (they are listed below)!

v2.10.5: Play JSON 2.10.5

Compare Source

Noteworthy

• #​1022 [2.10.x] Fix #​974 – Scala 3 macro cannot find Writes for Seq[Map[String, T]] (backport #​993) by @​sgodbillon
• #​1023 [2.10.x] Fix #​971 – "Exception occurred while executing macro expansion." (backport #​994) by @​sgodbillon

Changes

• #​1026 [2.10.x] Remove legacy typesafe resolver by @​mkurz
• #​1014 [2.10.x] scalafmt-core 3.8.1 (was 3.7.17) by @​scala-steward
• #​1015 [2.10.x] Patch updates by @​scala-steward
• #​1016 [2.10.x] Add tag [2.10.x] for Steward's pull requests by @​ihostage
• #​1004 [2.10.x] logback-classic 1.5.3 (was 1.4.14) by @​scala-steward
• #​1007 [2.10.x] Patch updates by @​scala-steward
• #​997 [2.10.x] Keep using Java 11 for testing and publishing (backport #​996) by @​mkurz
• #​992 [2.10.x] Bump playframework/.github from 3 to 4 by @​dependabot
• #​989 [2.10.x] Upgrade GitHub action workflows (backport #​988) by @​mkurz
• #​981 [2.10.x] nscplugin, sbt-scala-native, ... 0.4.17 (was 0.4.16) by @​scala-steward
• #​983 [2.10.x] Patch updates by @​scala-steward

❤️ Thanks to our premium sponsors!

If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor.
You can also individually sponsor the project by becoming a backer.

🙇 Thanks to our contributors

Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors.
Special thanks to all code contributors who helped with this particular release (they are listed below)!

v2.10.4: Play JSON 2.10.4

Compare Source

Noteworthy

• #​969 [2.10.x] Fix #​836 - Scala3 macro nesting class (backport #​956) by @​cchantep
• #​965 [2.10.x] sbt-scalajs, scalajs-compiler, ... 1.15.0 (was 1.14.0) by @​scala-steward

Other changes

• #​966 [2.10.x] sbt-jmh 0.4.7 (was 0.4.6) by @​scala-steward
• #​967 [2.10.x] Patch updates by @​scala-steward
• #​958 [2.10.x] Never trigger release process via UI, need to push tag by hand always by @​mkurz
• #​940 [2.10.x] sbt-scalajs, scalajs-compiler, ... 1.14.0 (was 1.13.2) by @​scala-steward
• #​953 [2.10.x] Patch updates by @​scala-steward

❤️ Thanks to our premium sponsors!

If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor.
You can also individually sponsor the project by becoming a backer.

🙇 Thanks to our contributors

Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors.
Special thanks to all code contributors who helped with this particular release (they are listed below)!

v2.10.3: Play JSON 2.10.3

Compare Source

Noteworthy

• #​945 make ImmutableLinkedHashMap serializable by @​ramazanyich

Changes

• #​947 [2.10.x] Set mimaPreviousArtifacts to last "major" release by @​mkurz
• #​942 Play 2.9.0 by @​mkurz
• #​939 play-docs-sbt-plugin 2.9.0-RC3 (was 2.9.0-RC2) by @​scala-steward
• #​941 [2.10.x] Patch updates by @​scala-steward
• #​937 [2.10.x] Move scala steward conf into .github folder by @​mkurz

❤️ Thanks to our premium sponsors!

If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor.
You can also individually sponsor the project by becoming a backer.

🙇 Thanks to our contributors

Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors.
Special thanks to all code contributors who helped with this particular release (they are listed below)!

v2.10.2: Play JSON 2.10.2

Compare Source

Changes

• #​934 [2.10.x] nscplugin, sbt-scala-native, ... 0.4.16 (was 0.4.15) (backport #​933) by @​scala-steward
• #​926 [2.10.x] Adjust branch for GHA workflows by @​mkurz
• #​923 Play 2.9 release candidate by @​mkurz

❤️ Thanks to our premium sponsors!

If you find this OSS project useful for work, please consider asking your company to support it by becoming a sponsor.
You can also individually sponsor the project by becoming a backer.

🙇 Thanks to our contributors

Finally, thanks to the community for their help with detailed bug reports, discussions about new features and pull request reviews. This project is only possible due to the help we had from amazing contributors.
Special thanks to all code contributors who helped with this particular release (they are listed below)!

v2.10.1: Play JSON 2.10.1

Compare Source

Replaces version 2.10.0 because that version might have shipped broken artifacts caused by scala/bug#12868.

Noteworthy

• #​793 Drop Java 8 by @​mkurz
• #​557 Cross-build to Scala 3 by @​dwijnand
• #​571 add Scala 3.0.0-RC1 to crossbuild by @​SethTisue
• #​689 Reimplement Macros with Scala 3 metaprogramming by @​cchantep
• #​572 Support fully-qualified classnames in Scala 3 macros by @​dwijnand
• #​729 Fix #​728 - Support case class with more 22 fields in Scala 3 by @​cchantep
• #​909 Scala 3.3.1 by @​mkurz
• #​879 jackson-databind 2.14.3 by @​scala-steward
• #​896 Custom field names for tuples Reads/Writes by @​cchantep
• #​886 Improve performance of json lookups in case of errors by @​vdebergue
• #​876 Add Json.newBuilder utility by @​cchantep
• #​826 Support Scala Native by @​lolgab
• #​692 Optimize JsObject.equals()/hashCode() by @​htmldoug
• #​675 Change jsObject.value to ImmutableLinkedHashMap to mitigate hash collisions by @​htmldoug
• #​674 Better handle String hashCode collisions in JsLookup by @​htmldoug
• #​579 KeyReads/Writes instances by @​cchantep

Changes

• #​925 sbt 1.9.6 by @​mkurz
• #​924 Group Scala Steward patch updates into single PR by @​mkurz
• #​922 Adjust MiMa settings + README after 2.10.0 release by @​mkurz
• #​921 sbt 1.9.5 by @​mkurz
• #​916 nscplugin, sbt-scala-native, ... 0.4.15 (was 0.4.14) by @​scala-steward
• #​917 sbt-scalafmt 2.5.2 (was 2.5.0) by @​scala-steward
• #​918 scalafmt-core 3.7.14 (was 3.7.12) by @​scala-steward
• #​919 scalatest 3.2.17 (was 3.2.16) by @​scala-steward
• #​920 sbt-jmh 0.4.6 (was 0.4.5) by @​scala-steward
• #​915 Scala 2.13.12 by @​mkurz
• #​914 sbt 1.9.4 (was 1.9.3) by @​scala-steward
• #​913 Play 2.9.0-M7 by @​mkurz
• #​912 specs2-core, specs2-junit 4.20.2 (was 4.20.0) by @​scala-steward
• #​910 logback-classic 1.4.11 (was 1.4.8) by @​scala-steward
• #​911 scalafmt-core 3.7.12 (was 3.7.11) by @​scala-steward
• #​908 scalafmt-core 3.7.11 (was 3.7.10) by @​scala-steward
• #​906 sbt-mima-plugin 1.1.3 (was 1.1.2) by @​scala-steward
• #​907 sbt 1.9.3 (was 1.9.2) by @​scala-steward
• #​905 scalafmt-core 3.7.10 (was 3.7.7) by @​scala-steward
• #​904 sbt 1.9.2 by @​mkurz
• #​902 sbt-scala-native-crossproject, ... 1.3.2 (was 1.3.1) by @​scala-steward
• #​903 scalafmt-core 3.7.7 (was 3.7.5) by @​scala-steward
• #​900 scalafmt-core 3.7.5 (was 3.7.4) by @​scala-steward
• #​897 logback-classic 1.4.8 (was 1.4.7) by @​scala-steward
• #​898 sbt-scalajs, scalajs-compiler, ... 1.13.2 (was 1.13.1) by @​scala-steward
• #​899 sbt 1.9.1 (was 1.9.0) by @​scala-steward
• #​901 jawn-parser 1.5.1 (was 1.5.0) by @​scala-steward
• #​894 nscplugin, sbt-scala-native, ... 0.4.14 (was 0.4.12) by @​scala-steward
• #​893 sbt-header 5.10.0 (was 5.9.0) by @​scala-steward
• #​895 sbt-jmh 0.4.5 (was 0.4.4) by @​scala-steward
• #​892 Update Play build with Scala 3.3 by @​mkurz
• #​891 Latest scala versions by @​mkurz
• #​888 sbt 1.9.0 (was 1.9.0-RC3) by @​scala-steward
• #​889 scalafmt-core 3.7.4 (was 3.7.3) by @​scala-steward
• #​890 jawn-parser 1.5.0 (was 1.4.0) by @​scala-steward
• #​885 sbt 1.9.0-RC3 + latest Play milestone by @​mkurz
• #​883 scala 3.3.0 by @​ornicar
• #​878 jackson-core 2.14.3 (was 2.14.1) by @​scala-steward
• #​881 sbt 1.8.3 (was 1.8.2) by @​scala-steward
• #​880 scala3-compiler, scala3-library, ... 3.3.0-RC6 (was 3.3.0-RC5) by @​scala-steward
• #​882 scalatest 3.2.16 (was 3.2.15) by @​scala-steward
• #​877 Update copyright by @​mkurz
• #​875 Update copyright by @​mkurz
• #​848 scala3-compiler, scala3-library, ... 3.3.0-RC5 (was 3.2.0) by @​scala-steward
• #​873 sbt-ci-release 1.5.12 (was 1.5.11) by @​scala-steward
• #​874 specs2-core, specs2-junit 4.20.0 (was 4.19.2) by @​scala-steward
• #​870 logback-classic 1.4.7 (was 1.4.6) by @​scala-steward
• #​868 sbt-scalajs-crossproject 1.3.1 (was 1.3.0) by @​scala-steward
• #​869 sbt-scalajs, scalajs-compiler, ... 1.13.1 (was 1.13.0) by @​scala-steward
• #​867 sbt-scalajs-crossproject 1.3.0 (was 1.2.0) by @​scala-steward
• #​866 play-docs-sbt-plugin 2.9.0-M4 (was 2.9.0-M2) by @​scala-steward
• #​865 remove unnecessary shapeless dependency by @​xuwei-k
• #​862 sbt-mima-plugin 1.1.2 (was 1.1.1) by @​scala-steward
• #​863 joda-time 2.12.5 (was 2.12.2) by @​scala-steward
• #​864 scalafmt-core 3.7.3 (was 3.7.2) by @​scala-steward
• #​861 remove deprecated JsBoolean methods by @​xuwei-k
• #​858 logback-classic 1.4.6 (was 1.4.5) by @​scala-steward
• #​857 Update data for pom.xml by @​mkurz
• #​856 Update developer information + links by @​mkurz
• #​855 jol-core 0.17 (was 0.16) by @​scala-steward
• #​854 Ignore non existing Scala 2.12/Play 2.9 artifacts for dependency submission by @​mkurz
• #​853 Set up sbt dependency submission by @​mkurz
• #​852 scalafmt-core 3.7.2 (was 3.7.1) by @​scala-steward
• #​851 Upgrade logback conf to new canonical format by @​mkurz
• #​847 jackson-core, jackson-databind 2.14.2 (was 2.14.1) by @​scala-steward
• #​849 specs2-core, specs2-junit 4.19.2 (was 4.19.0) by @​scala-steward
• #​850 sbt-jmh 0.4.4 (was 0.4.3) by @​scala-steward
• #​844 sbt-scalajs, scalajs-compiler, ... 1.13.0 (was 1.12.0) by @​scala-steward
• #​845 scalafmt-core 3.7.1 (was 3.6.1) by @​scala-steward
• #​831 Add option to preserve zero decimals by @​trbogart
• #​837 sbt 1.8.2 (was 1.8.0) by @​scala-steward
• #​838 scalatest 3.2.15 (was 3.2.14) by @​scala-steward
• #​834 sbt-scalajs, scalajs-compiler, ... 1.12.0 (was 1.11.0) by @​scala-steward
• #​833 joda-time 2.12.2 (was 2.12.1) by @​scala-steward
• #​829 sbt-header 5.9.0 (was 5.8.0) by @​scala-steward
• #​827 logback-classic 1.4.5 (was 1.4.4) by @​scala-steward
• #​828 jackson-core, jackson-databind 2.14.1 (was 2.14.0) by @​scala-steward
• #​830 specs2-core, specs2-junit 4.19.0 (was 4.17.0) by @​scala-steward
• #​824 sbt-scalafmt 2.5.0 (was 2.4.6) by @​scala-steward
• #​823 sbt 1.8.0 (was 1.8.0-RC1) by @​scala-steward
• #​825 scalafmt-core 3.6.1 (was 3.6.0) by @​scala-steward
• #​799 Revert "Workaround for scala-xml conflict" / sbt 1.8.0-RC1 by @​mkurz
• #​819 jackson-core 2.14.0 (was 2.13.4) by @​scala-steward
• #​820 jackson-databind 2.14.0 (was 2.13.4.2) by @​scala-steward
• #​821 joda-time 2.12.1 (was 2.12.0) by @​scala-steward
• #​818 scalafmt-core 3.6.0 (was 3.5.9) by @​scala-steward
• #​817 joda-time 2.12.0 (was 2.11.2) by @​scala-steward
• #​815 sbt-ci-release 1.5.11 (was 1.5.10) by @​scala-steward
• #​816 sbt-header 5.8.0 (was 5.7.0) by @​scala-steward
• #​814 Link to .github/RELEASING.md by @​mkurz
• #​802 Remove .jvmopts not needed anymore by @​mkurz
• #​811 scalacheck-1-16 3.2.14.0 (was 3.2.13.0) by @​scala-steward
• #​804 shapeless 2.3.10 (was 2.3.9) by @​scala-steward
• #​805 jackson-databind 2.13.4.2 (was 2.13.4) by @​scala-steward
• #​806 sbt-mima-plugin 1.1.1 (was 1.1.0) by @​scala-steward
• #​803 logback-classic 1.4.4 (was 1.4.0) by @​scala-steward
• #​812 specs2-core, specs2-junit 4.17.0 (was 4.16.1) by @​scala-steward
• #​810 scalatest 3.2.14 (was 3.2.13) by @​scala-steward
• #​809 scalacheck 1.17.0 (was 1.16.0) by @​scala-steward
• #​808 sbt-scalajs, scalajs-compiler, ... 1.11.0 (was 1.10.1) by @​scala-steward
• #​807 joda-time 2.11.2 (was 2.11.1) by @​scala-steward
• #​801 Use the mergify config from the .github repo by @​mkurz
• #​797 Play 2.9 milestone by @​mkurz
• #​796 Latest Scala/sbt versions by @​mkurz
• #​794 update scala version settings by @​xuwei-k
• #​793 Drop Java 8 by @​mkurz
• #​791 scala3-compiler, scala3-library, ... 3.2.0 (was 3.1.3) by @​scala-steward
• #​792 🔄 Synced file(s) with playframework/.github by @​ihostage
• #​790 jackson-core, jackson-databind 2.13.4 (was 2.13.3) by @​scala-steward
• #​789 Removed the Lightbend CLA from the PR template by @​BillyAutrey
• #​787 logback-classic 1.4.0 (was 1.2.11) by @​scala-steward
• #​783 joda-time 2.11.1 (was 2.11.0) by @​scala-steward
• #​781 joda-time 2.11.0 (was

---

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.