You are viewing a plain text version of this content. The canonical link for it is here.
Posted to commits@sling.apache.org by ro...@apache.org on 2026/08/06 08:57:42 UTC

(sling-org-apache-sling-committer-cli) branch issue/fix-bc created (now 0b38492)

This is an automated email from the ASF dual-hosted git repository.

rombert pushed a change to branch issue/fix-bc
in repository https://gitbox.apache.org/repos/asf/sling-org-apache-sling-committer-cli.git


      at 0b38492  fix(deps): udpate to latest jdk18 version of the BouncyCastle artifacts

This branch includes the following new commits:

     new 0b38492  fix(deps): udpate to latest jdk18 version of the BouncyCastle artifacts

The 1 revisions listed above as "new" are entirely new to this
repository and will be described in separate emails.  The revisions
listed as "add" were already present in the repository and have only
been added to this reference.



(sling-org-apache-sling-committer-cli) 01/01: fix(deps): udpate to latest jdk18 version of the BouncyCastle artifacts

Posted by ro...@apache.org.
This is an automated email from the ASF dual-hosted git repository.

rombert pushed a commit to branch issue/fix-bc
in repository https://gitbox.apache.org/repos/asf/sling-org-apache-sling-committer-cli.git

commit 0b38492d8ec622a1c22eb67b25ea08512975cb76
Author: Robert Munteanu <ro...@apache.org>
AuthorDate: Thu Aug 6 10:56:52 2026 +0200

    fix(deps): udpate to latest jdk18 version of the BouncyCastle artifacts
    
    This fixes several vulnerabilities and also moves away from the jdk15 branch.
---
 pom.xml                    | 15 +++++++++++----
 src/main/features/app.json |  7 +++++--
 2 files changed, 16 insertions(+), 6 deletions(-)

diff --git a/pom.xml b/pom.xml
index 1102842..fcb84ea 100644
--- a/pom.xml
+++ b/pom.xml
@@ -30,6 +30,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <project.build.outputTimestamp>2026-01-01T00:00:01Z</project.build.outputTimestamp>
         <sling.java.version>21</sling.java.version>
+        <bouncycastle.version>1.85</bouncycastle.version>
     </properties>
 
     <dependencies>
@@ -115,14 +116,20 @@
         </dependency>
         <dependency>
             <groupId>org.bouncycastle</groupId>
-            <artifactId>bcpg-jdk15on</artifactId>
-            <version>1.62</version>
+            <artifactId>bcpg-jdk18on</artifactId>
+            <version>${bouncycastle.version}</version>
             <scope>provided</scope>
         </dependency>
         <dependency>
             <groupId>org.bouncycastle</groupId>
-            <artifactId>bcprov-jdk15on</artifactId>
-            <version>1.67</version>
+            <artifactId>bcprov-jdk18on</artifactId>
+            <version>${bouncycastle.version}</version>
+            <scope>provided</scope>
+        </dependency>
+        <dependency>
+            <groupId>org.bouncycastle</groupId>
+            <artifactId>bcutil-jdk18on</artifactId>
+            <version>${bouncycastle.version}</version>
             <scope>provided</scope>
         </dependency>
         <dependency>
diff --git a/src/main/features/app.json b/src/main/features/app.json
index afec7a7..8ab6736 100644
--- a/src/main/features/app.json
+++ b/src/main/features/app.json
@@ -92,10 +92,13 @@
             "start-order": "4"
         },
         {
-            "id": "org.bouncycastle:bcpg-jdk15on:1.62"
+            "id": "org.bouncycastle:bcpg-jdk18on:${bouncycastle.version}"
         },
         {
-            "id": "org.bouncycastle:bcprov-jdk15on:1.67"
+            "id": "org.bouncycastle:bcprov-jdk18on:${bouncycastle.version}"
+        },
+        {
+            "id": "org.bouncycastle:bcutil-jdk18on:${bouncycastle.version}"
         },
         {
             "id": "javax.mail:mail:1.5.0-b01"