Update 'bouncycastle' dependency to 1.78.1

Signed-off-by: Tom Sellman <[email protected]>
nextflow-io · Nov 5, 2024 · aa5ca69 · aa5ca69
1 parent 549e790
commit aa5ca69
Show file tree

Hide file tree

Showing 2 changed files with 8 additions and 3 deletions.
diff --git a/modules/nextflow/build.gradle b/modules/nextflow/build.gradle
@@ -47,8 +47,8 @@ dependencies {
     api 'jline:jline:2.9'
     api 'org.pf4j:pf4j:3.12.0'
     api 'dev.failsafe:failsafe:3.1.0'
-    api 'org.bouncycastle:bcprov-ext-jdk15on:1.70'
-    api 'org.bouncycastle:bcpkix-jdk15on:1.70'
+    api 'org.bouncycastle:bcprov-ext-jdk18on:1.78.1'
+    api 'org.bouncycastle:bcpkix-jdk18on:1.78.1'
 
     testImplementation 'org.subethamail:subethasmtp:3.1.7'
 

diff --git a/plugins/nf-google/build.gradle b/plugins/nf-google/build.gradle
@@ -40,12 +40,17 @@ dependencies {
     api 'com.google.apis:google-api-services-lifesciences:v2beta-rev20210527-1.31.5'
     api 'com.google.auth:google-auth-library-oauth2-http:0.18.0'
     api 'com.google.cloud:google-cloud-batch:0.29.0'
-    api 'com.google.cloud:google-cloud-logging:3.8.0'
+    api ('com.google.cloud:google-cloud-logging:3.8.0') {
+        // exclude old version of bouncycastle and replace with newer one
+        exclude group: 'org.bouncycastle'
+    }
     api 'com.google.cloud:google-cloud-nio:0.124.8'
     api 'com.google.cloud:google-cloud-storage:2.9.3'
     api 'com.google.code.gson:gson:2.10.1'
     // include protobuf to address vulnerability issues
     runtimeOnly 'com.google.protobuf:protobuf-java:3.25.5'
+    runtimeOnly 'org.bouncycastle:bcpkix-jdk18on:1.78.1'
+    runtimeOnly 'org.bouncycastle:bcprov-jdk18on:1.78.1'
 
     testImplementation(testFixtures(project(":nextflow")))
     testImplementation "org.apache.groovy:groovy:4.0.23"