You are viewing a plain text version of this content. The canonical link for it is here.

Posted to commits@texera.apache.org by GitBox <gi...@apache.org> on 2026/07/10 01:19:21 UTC

[GH] (texera/gh-readonly-queue/main/pr-6286-8a51c561e6902e9611fc06b47660f42233bec244): Workflow run "Required Checks" failed!

The GitHub Actions job "Required Checks" on texera.git/gh-readonly-queue/main/pr-6286-8a51c561e6902e9611fc06b47660f42233bec244 has failed.
Run started by GitHub user Yicong-Huang (triggered by Yicong-Huang).

Head commit for run:
3d3df83206bb1ddcff24eca021978d77e892d572 / Yicong Huang <17...@users.noreply.github.com>
fix(deps): upgrade bouncycastle to fix CVE-2025-14813 (#6286)

### What changes were proposed in this PR?

This PR pins the Bouncy Castle JDK 18 artifacts to `1.84` through shared
sbt `dependencyOverrides`:

| Artifact | Version |
| --- | --- |
| `org.bouncycastle:bcpkix-jdk18on` | `1.84` |
| `org.bouncycastle:bcprov-jdk18on` | `1.84` |
| `org.bouncycastle:bcutil-jdk18on` | `1.84` |

It also updates `computing-unit-managing-service/LICENSE-binary` to
match the resolved bundled jar versions.

### Any related issues, documentation, discussions?

Related security report:
https://github.com/apache/texera/security/dependabot/782

### How was this PR tested?

```bash
JAVA_HOME=$(/usr/libexec/java_home -v 17) sbt 'show ComputingUnitManagingService / dependencyOverrides' 'show ComputingUnitManagingService / update' | rg 'bouncycastle|bcprov|bcpkix|bcutil|\[success\]|\[error\]'
```

Confirmed `bcpkix-jdk18on`, `bcprov-jdk18on`, and `bcutil-jdk18on` all
resolve to `1.84`.


### Was this PR authored or co-authored using generative AI tooling?

Generated-by: Codex (GPT-5)

Report URL: https://github.com/apache/texera/actions/runs/29061757119

With regards,
GitHub Actions via GitBox