This is an automated email from the ASF dual-hosted git repository. rombert pushed a commit to branch issue/fix-bc in repository https://gitbox.apache.org/repos/asf/sling-org-apache-sling-committer-cli.git
commit 0b38492d8ec622a1c22eb67b25ea08512975cb76 Author: Robert Munteanu <[email protected]> AuthorDate: Thu Aug 6 10:56:52 2026 +0200 fix(deps): udpate to latest jdk18 version of the BouncyCastle artifacts This fixes several vulnerabilities and also moves away from the jdk15 branch. --- pom.xml | 15 +++++++++++---- src/main/features/app.json | 7 +++++-- 2 files changed, 16 insertions(+), 6 deletions(-) diff --git a/pom.xml b/pom.xml index 1102842..fcb84ea 100644 --- a/pom.xml +++ b/pom.xml @@ -30,6 +30,7 @@ <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding> <project.build.outputTimestamp>2026-01-01T00:00:01Z</project.build.outputTimestamp> <sling.java.version>21</sling.java.version> + <bouncycastle.version>1.85</bouncycastle.version> </properties> <dependencies> @@ -115,14 +116,20 @@ </dependency> <dependency> <groupId>org.bouncycastle</groupId> - <artifactId>bcpg-jdk15on</artifactId> - <version>1.62</version> + <artifactId>bcpg-jdk18on</artifactId> + <version>${bouncycastle.version}</version> <scope>provided</scope> </dependency> <dependency> <groupId>org.bouncycastle</groupId> - <artifactId>bcprov-jdk15on</artifactId> - <version>1.67</version> + <artifactId>bcprov-jdk18on</artifactId> + <version>${bouncycastle.version}</version> + <scope>provided</scope> + </dependency> + <dependency> + <groupId>org.bouncycastle</groupId> + <artifactId>bcutil-jdk18on</artifactId> + <version>${bouncycastle.version}</version> <scope>provided</scope> </dependency> <dependency> diff --git a/src/main/features/app.json b/src/main/features/app.json index afec7a7..8ab6736 100644 --- a/src/main/features/app.json +++ b/src/main/features/app.json @@ -92,10 +92,13 @@ "start-order": "4" }, { - "id": "org.bouncycastle:bcpg-jdk15on:1.62" + "id": "org.bouncycastle:bcpg-jdk18on:${bouncycastle.version}" }, { - "id": "org.bouncycastle:bcprov-jdk15on:1.67" + "id": "org.bouncycastle:bcprov-jdk18on:${bouncycastle.version}" + }, + { + "id": "org.bouncycastle:bcutil-jdk18on:${bouncycastle.version}" }, { "id": "javax.mail:mail:1.5.0-b01"
