RT @scala_sbt: sbt includes log4j 2 as a dependency. sbt 1.5.6 updates log4j to 2.15.0, which fixes the remote code execution vulnerability…