This is an automated email from the ASF dual-hosted git repository.
rombert pushed a commit to branch master
in repository
https://gitbox.apache.org/repos/asf/sling-org-apache-sling-committer-cli.git
The following commit(s) were added to refs/heads/master by this push:
new 0beab24 fix(deps): update to latest jdk18 version of the BouncyCastle
artifacts (#46)
0beab24 is described below
commit 0beab24cdc797a03060e9ffea2c7851a04037576
Author: Robert Munteanu <[email protected]>
AuthorDate: Thu Aug 6 11:04:36 2026 +0200
fix(deps): update to latest jdk18 version of the BouncyCastle artifacts
(#46)
This fixes several vulnerabilities and also moves away from the jdk15
branch.
---
pom.xml | 15 +++++++++++----
src/main/features/app.json | 7 +++++--
2 files changed, 16 insertions(+), 6 deletions(-)
diff --git a/pom.xml b/pom.xml
index 1102842..fcb84ea 100644
--- a/pom.xml
+++ b/pom.xml
@@ -30,6 +30,7 @@
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<project.build.outputTimestamp>2026-01-01T00:00:01Z</project.build.outputTimestamp>
<sling.java.version>21</sling.java.version>
+ <bouncycastle.version>1.85</bouncycastle.version>
</properties>
<dependencies>
@@ -115,14 +116,20 @@
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
- <artifactId>bcpg-jdk15on</artifactId>
- <version>1.62</version>
+ <artifactId>bcpg-jdk18on</artifactId>
+ <version>${bouncycastle.version}</version>
<scope>provided</scope>
</dependency>
<dependency>
<groupId>org.bouncycastle</groupId>
- <artifactId>bcprov-jdk15on</artifactId>
- <version>1.67</version>
+ <artifactId>bcprov-jdk18on</artifactId>
+ <version>${bouncycastle.version}</version>
+ <scope>provided</scope>
+ </dependency>
+ <dependency>
+ <groupId>org.bouncycastle</groupId>
+ <artifactId>bcutil-jdk18on</artifactId>
+ <version>${bouncycastle.version}</version>
<scope>provided</scope>
</dependency>
<dependency>
diff --git a/src/main/features/app.json b/src/main/features/app.json
index afec7a7..8ab6736 100644
--- a/src/main/features/app.json
+++ b/src/main/features/app.json
@@ -92,10 +92,13 @@
"start-order": "4"
},
{
- "id": "org.bouncycastle:bcpg-jdk15on:1.62"
+ "id": "org.bouncycastle:bcpg-jdk18on:${bouncycastle.version}"
},
{
- "id": "org.bouncycastle:bcprov-jdk15on:1.67"
+ "id": "org.bouncycastle:bcprov-jdk18on:${bouncycastle.version}"
+ },
+ {
+ "id": "org.bouncycastle:bcutil-jdk18on:${bouncycastle.version}"
},
{
"id": "javax.mail:mail:1.5.0-b01"
