Skip to content

[DEVO-14127] bouncycastle version fix in cdp and emr#1879

Merged
smaring merged 1 commit into
11.0from
DEVO-14127-11.0
May 26, 2026
Merged

[DEVO-14127] bouncycastle version fix in cdp and emr#1879
smaring merged 1 commit into
11.0from
DEVO-14127-11.0

Conversation

@smaring

@smaring smaring commented May 26, 2026

Copy link
Copy Markdown
Member

No description provided.

Copilot AI review requested due to automatic review settings May 26, 2026 17:12
@smaring smaring requested a review from a team as a code owner May 26, 2026 17:12
@hitachivantarasonarqube

Copy link
Copy Markdown

Copilot AI left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

This PR updates the EMR 7.7.0 and CDP DC 7.1 shim reactor POMs to explicitly control the Bouncy Castle dependency versions via a single property, ensuring consistent resolution of the bcprov/bcmail/bcpkix/bcutil artifacts within those shim builds.

Changes:

  • Add a bouncycastle.version property (set to 1.84) to the emr770 and cdpdc71 shim reactor POMs.
  • Update Bouncy Castle entries in each reactor’s dependencyManagement to use ${bouncycastle.version} instead of the previous property reference.

Reviewed changes

Copilot reviewed 2 out of 2 changed files in this pull request and generated no comments.

File Description
shims/emr770/pom.xml Introduces bouncycastle.version and applies it to managed Bouncy Castle dependencies for the EMR 7.7.0 shim reactor.
shims/cdpdc71/pom.xml Introduces bouncycastle.version and applies it to managed Bouncy Castle dependencies for the CDP DC 7.1 shim reactor.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

@buildguy

Copy link
Copy Markdown
Collaborator

👍 Frogbot scanned this pull request and did not find any new security issues.

Note:

Frogbot also supports Contextual Analysis, Secret Detection, IaC and SAST Vulnerabilities Scanning. This features are included as part of the JFrog Advanced Security package, which isn't enabled on your system.


@buildguy

Copy link
Copy Markdown
Collaborator

✅ Build finished in 3m 57s

Build command:

mvn clean verify -B -e -Daudit -Djs.no.sandbox -pl \
shims/cdpdc71,shims/emr770

❗ No tests found!

ℹ️ This is an automatic message

@smaring smaring merged commit f16bc6a into 11.0 May 26, 2026
3 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants