Upgrade bouncycastle

Author: tobias

dependabot/deps-list.txt

@@ -95,9 +95,9 @@ org.apache.lucene/lucene-queryparser 8.11.4  (Apache-2.0)
 org.apache.lucene/lucene-sandbox 8.11.4  (Apache-2.0)
 org.apache.maven/maven-model 3.8.4  (Apache-2.0)
 org.apache.maven/maven-repository-metadata 3.8.4  (Apache-2.0)
-org.bouncycastle/bcpkix-jdk18on 1.78  (Bouncy Castle Licence)
-org.bouncycastle/bcprov-jdk18on 1.78  (Bouncy Castle Licence)
-org.bouncycastle/bcutil-jdk18on 1.78  (Bouncy Castle Licence)
+org.bouncycastle/bcpkix-jdk18on 1.78.1  (Bouncy Castle Licence)
+org.bouncycastle/bcprov-jdk18on 1.78.1  (Bouncy Castle Licence)
+org.bouncycastle/bcutil-jdk18on 1.78.1  (Bouncy Castle Licence)
 org.checkerframework/checker-qual 3.42.0  (MIT)
 org.clj-commons/clj-http-lite 1.0.13  (MIT)
 org.clojure/clojure 1.12.1  (EPL-1.0)

dependabot/deps-tree.txt

@@ -57,10 +57,10 @@ com.github.scribejava/scribejava-apis 8.3.1
     X com.fasterxml.jackson.core/jackson-databind 2.12.3 :use-top
   X com.fasterxml.jackson.core/jackson-databind 2.12.3 :use-top
 digest/digest 1.4.10
-org.bouncycastle/bcpkix-jdk18on 1.78
-  X org.bouncycastle/bcprov-jdk18on 1.78 :use-top
-  . org.bouncycastle/bcutil-jdk18on 1.78
-    X org.bouncycastle/bcprov-jdk18on 1.78 :use-top
+org.bouncycastle/bcpkix-jdk18on 1.78.1
+  X org.bouncycastle/bcprov-jdk18on 1.78.1 :use-top
+  . org.bouncycastle/bcutil-jdk18on 1.78.1
+    X org.bouncycastle/bcprov-jdk18on 1.78.1 :use-top
 ring/ring-jetty-adapter 1.13.1
   X ring/ring-core 1.13.1 :use-top
   . org.ring-clojure/ring-jakarta-servlet 1.13.1
@@ -150,7 +150,7 @@ org.apache.lucene/lucene-queryparser 8.11.4
   X org.apache.lucene/lucene-core 8.11.4 :use-top
   . org.apache.lucene/lucene-queries 8.11.4
   . org.apache.lucene/lucene-sandbox 8.11.4
-org.bouncycastle/bcprov-jdk18on 1.78
+org.bouncycastle/bcprov-jdk18on 1.78.1
 ring-middleware-format/ring-middleware-format 0.7.5
   X org.clojure/core.memoize 1.0.257 :superseded
     . org.clojure/core.cache 1.0.225 :newer-version

dependabot/pom.xml

@@ -86,7 +86,7 @@
     <dependency>
       <groupId>org.bouncycastle</groupId>
       <artifactId>bcpkix-jdk18on</artifactId>
-      <version>1.78</version>
+      <version>1.78.1</version>
     </dependency>
     <dependency>
       <groupId>ring</groupId>
@@ -151,7 +151,7 @@
     <dependency>
       <groupId>org.bouncycastle</groupId>
       <artifactId>bcprov-jdk18on</artifactId>
-      <version>1.78</version>
+      <version>1.78.1</version>
     </dependency>
     <dependency>
       <groupId>ring-middleware-format</groupId>

deps.edn

@@ -60,8 +60,8 @@
   org.apache.maven/maven-repository-metadata {:mvn/version "3.8.4"}
   ;; Override bouncycastle brought in by buddy-core to address CVE-2024-29857,
   ;; CVE-2024-30171, CVE-2024-30172
-  org.bouncycastle/bcpkix-jdk18on {:mvn/version "1.78"}
-  org.bouncycastle/bcprov-jdk18on {:mvn/version "1.78"}
+  org.bouncycastle/bcpkix-jdk18on {:mvn/version "1.78.1"}
+  org.bouncycastle/bcprov-jdk18on {:mvn/version "1.78.1"}
   org.clojure/clojure {:mvn/version "1.12.1"}
   org.clojure/data.xml {:mvn/version "0.2.0-alpha9"}
   org.clojure/tools.logging {:mvn/version "1.2.4"}