Skip to content

Update jgit to version 7.7.1, Bouncy Castle to 1.85 and Apache Mina SSH to 2.19.0 - #9576

Open
matthiasblaesing wants to merge 1 commit into
apache:masterfrom
matthiasblaesing:jgit-signing-alt-updated
Open

Update jgit to version 7.7.1, Bouncy Castle to 1.85 and Apache Mina SSH to 2.19.0#9576
matthiasblaesing wants to merge 1 commit into
apache:masterfrom
matthiasblaesing:jgit-signing-alt-updated

Conversation

@matthiasblaesing

Copy link
Copy Markdown
Contributor

Followup PR for #9483 separating out the version updates.

@matthiasblaesing matthiasblaesing added Upgrade Library Library (Dependency) Upgrade ci:all-tests [ci] enable all tests labels Aug 26, 2026
@apache apache locked and limited conversation to collaborators Aug 26, 2026
@apache apache unlocked this conversation Aug 26, 2026
@matthiasblaesing
matthiasblaesing force-pushed the jgit-signing-alt-updated branch from f9fa96f to b442228 Compare August 30, 2026 17:05
@mbien mbien added this to the NB32 milestone Sep 2, 2026

@mbien mbien left a comment

Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

dep tree looks good (old tree was the same), but we have to watch out since more and more libraries are now using slf4j 2.x

+- org.eclipse.jgit:org.eclipse.jgit.gpg.bc:jar:7.7.1.202607240634-r [compile] (origin: central)
|  +- org.bouncycastle:bcpg-jdk18on:jar:1.84 [compile] (origin: central,jgit-repository)
|  +- org.bouncycastle:bcprov-jdk18on:jar:1.84 [compile] (origin: central,jgit-repository)
|  +- org.bouncycastle:bcutil-jdk18on:jar:1.84 [compile] (origin: central,jgit-repository)
|  +- org.bouncycastle:bcpkix-jdk18on:jar:1.84 [compile] (origin: central,jgit-repository)
|  \- org.slf4j:slf4j-api:jar:2.0.18 [compile] (origin: central,jgit-repository)
+- org.eclipse.jgit:org.eclipse.jgit.lfs:jar:7.7.1.202607240634-r [compile] (origin: central)
|  \- com.google.code.gson:gson:jar:2.14.0 [compile] (origin: central,jgit-repository)
|     \- com.google.errorprone:error_prone_annotations:jar:2.48.0 [compile] (origin: central,jgit-repository)
+- org.eclipse.jgit:org.eclipse.jgit:jar:7.7.1.202607240634-r [compile] (origin: central)
|  +- com.googlecode.javaewah:JavaEWAH:jar:1.2.3 [compile] (origin: central,jgit-repository)
|  \- commons-codec:commons-codec:jar:1.22.0 [compile] (origin: central,jgit-repository)
+- org.eclipse.jgit:org.eclipse.jgit.ssh.apache:jar:7.7.1.202607240634-r [compile] (origin: central)
+- org.eclipse.jgit:org.eclipse.jgit.ssh.apache.agent:jar:7.7.1.202607240634-r [compile] (origin: central)
|  +- net.java.dev.jna:jna:jar:5.18.1 [compile] (origin: central,jgit-repository)
|  \- net.java.dev.jna:jna-platform:jar:5.18.1 [compile] (origin: central,jgit-repository)
+- org.apache.sshd:sshd-sftp:jar:2.19.0 [compile] (origin: central)
|  +- org.apache.sshd:sshd-core:jar:2.19.0 [compile] (origin: central)
|  |  \- org.apache.sshd:sshd-common:jar:2.19.0 [compile] (origin: central)
|  \- org.slf4j:jcl-over-slf4j:jar:1.7.36 [compile] (origin: central)
\- org.apache.sshd:sshd-osgi:jar:2.19.0 [compile] (origin: central)

note for future me: sshd-core and sshd-common are in sshd-osgi

ran some basic tests and git support worked as usual.

@mbien

mbien commented Sep 3, 2026

Copy link
Copy Markdown
Member

will probably add a followup PR which updates most apache commons libs

@matthiasblaesing

Copy link
Copy Markdown
Contributor Author

I intend to merge this next weekend, unless objections are raised.

@mbien

mbien commented Sep 5, 2026

Copy link
Copy Markdown
Member

tbh: feel free to merge a bit earlier so that we can test it a bit more. JGit updates were not always smooth in past. One particular case is now covered by a tripwire test after causing trouble twice:

d4cd514#diff-c56d58977a3587efba3b43f01f80ab053c5f08e9d2b8d0489bf5b5a111a27b4aR65

@matthiasblaesing

Copy link
Copy Markdown
Contributor Author

I'm not available next week, so the earliest I could react to problems would be the following weekend. But if requested I'm willing to merge tomorrow.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

ci:all-tests [ci] enable all tests git [ci] enable versioning job Upgrade Library Library (Dependency) Upgrade

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants