Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

chore(gradle): bump sslcontext from 8.1.1 to 8.3.6 #6089

Merged
merged 1 commit into from
Sep 20, 2024

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Sep 20, 2024

Bumps sslcontext from 8.1.1 to 8.3.6.
Updates io.github.hakky54:sslcontext-kickstart from 8.1.1 to 8.3.6

Changelog

Sourced from io.github.hakky54:sslcontext-kickstart's changelog.

v8.3.6

  • Bumped dependencies
  • Enhanced logging within LoggingX509ExtendedTrustManager
  • Exposed JDK (aka cacert) keystore and System property derived keystore in KeyStoreUtils

v8.3.5

  • Removed verbose debug logging for CertificateUtils
  • Added getters for hostname and port for TrustManagerParameters
  • Simplify usage of Security Provider
  • Bumped dependencies

v8.3.4

  • Bumped dependencies
  • Bug-fix added support for reloading ciphers in SSLEngine, SSLSocketFactory and SSLServerSocketFactory

v8.3.3

  • Added reloadable ciphers
  • Bumped dependencies

v8.3.2

  • Added custom security provider
  • Bumped dependencies
  • Bug-fix remove invalid characters when generating certificate alias
  • Bug-fix handle timout exception correctly on java 8 when extracting certificates

v8.3.1

  • Bumped dependencies
  • Added system name to the system trust manager
  • Bug-fix clear certificate collector after each fetch
  • Bug-fix resolve empty collector for certificate extracting client when disabling resolving root ca
  • Added timeout to certificate extracting client
  • Applied sonar recommendations

v8.3.0

  • Bumped dependencies
  • Added option to extract public key from private key
  • Added option to disable resolving root ca when extracting server certificates
  • Added options to exclude ciphers and protocols in the SSLFactory
  • Bug-fix allow adding new certificates in a nested TrustManager
  • Simplified adding certificates to TrustManager
  • Simplified swapping TrustManagers
  • Added JdkX509ExtendedTrustManager wrapper for JDK trusted CA's from cacerts
  • Added SystemX509ExtendedTrustManager wrapper for OS trusted CA's

v8.2.0

  • Added option to conceal trusted certificate names for a server
  • Bumped dependencies

v8.1.7

  • Resolved CVE-2023-33201 LDAP injection vulnerability caused by transitive dependency of Bouncy Castle in the library of sslcontext-kickstart-for-pem
  • Bumped dependencies
  • Filter out duplicate extracted certificates
  • Add appending capabilities to an existing keystore
  • Added option to extract port from uri

v8.1.6

  • Bug-fix Resolved antivirus alert by removing shell script layer from Mac OS X command to fetch system trusted Certificate Authorities
  • Bug-fix Resolved antivirus alert by excluding ~/Library/Keychains/login.keychain-db keychain file from MacCertificateUtils

... (truncated)

Commits
  • c4497e7 [maven-release-plugin] prepare release v8.3.6
  • 296514f Updated docs
  • f79b2dc Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0
  • a72d2c4 Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.7.0
  • 74c16ac Bump org.sonatype.plugins:nexus-staging-maven-plugin
  • f2ae908 Bump version.byte-buddy from 1.14.16 to 1.14.17
  • f9cdbcd Added additional public api's to the documentation
  • eab4dca Removed printing java version
  • d86e009 Added maxxedev as contributor
  • 1f62d58 Fixed typo
  • Additional commits viewable in compare view

Updates io.github.hakky54:sslcontext-kickstart-for-jetty from 8.1.1 to 8.3.6

Changelog

Sourced from io.github.hakky54:sslcontext-kickstart-for-jetty's changelog.

v8.3.6

  • Bumped dependencies
  • Enhanced logging within LoggingX509ExtendedTrustManager
  • Exposed JDK (aka cacert) keystore and System property derived keystore in KeyStoreUtils

v8.3.5

  • Removed verbose debug logging for CertificateUtils
  • Added getters for hostname and port for TrustManagerParameters
  • Simplify usage of Security Provider
  • Bumped dependencies

v8.3.4

  • Bumped dependencies
  • Bug-fix added support for reloading ciphers in SSLEngine, SSLSocketFactory and SSLServerSocketFactory

v8.3.3

  • Added reloadable ciphers
  • Bumped dependencies

v8.3.2

  • Added custom security provider
  • Bumped dependencies
  • Bug-fix remove invalid characters when generating certificate alias
  • Bug-fix handle timout exception correctly on java 8 when extracting certificates

v8.3.1

  • Bumped dependencies
  • Added system name to the system trust manager
  • Bug-fix clear certificate collector after each fetch
  • Bug-fix resolve empty collector for certificate extracting client when disabling resolving root ca
  • Added timeout to certificate extracting client
  • Applied sonar recommendations

v8.3.0

  • Bumped dependencies
  • Added option to extract public key from private key
  • Added option to disable resolving root ca when extracting server certificates
  • Added options to exclude ciphers and protocols in the SSLFactory
  • Bug-fix allow adding new certificates in a nested TrustManager
  • Simplified adding certificates to TrustManager
  • Simplified swapping TrustManagers
  • Added JdkX509ExtendedTrustManager wrapper for JDK trusted CA's from cacerts
  • Added SystemX509ExtendedTrustManager wrapper for OS trusted CA's

v8.2.0

  • Added option to conceal trusted certificate names for a server
  • Bumped dependencies

v8.1.7

  • Resolved CVE-2023-33201 LDAP injection vulnerability caused by transitive dependency of Bouncy Castle in the library of sslcontext-kickstart-for-pem
  • Bumped dependencies
  • Filter out duplicate extracted certificates
  • Add appending capabilities to an existing keystore
  • Added option to extract port from uri

v8.1.6

  • Bug-fix Resolved antivirus alert by removing shell script layer from Mac OS X command to fetch system trusted Certificate Authorities
  • Bug-fix Resolved antivirus alert by excluding ~/Library/Keychains/login.keychain-db keychain file from MacCertificateUtils

... (truncated)

Commits
  • c4497e7 [maven-release-plugin] prepare release v8.3.6
  • 296514f Updated docs
  • f79b2dc Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0
  • a72d2c4 Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.7.0
  • 74c16ac Bump org.sonatype.plugins:nexus-staging-maven-plugin
  • f2ae908 Bump version.byte-buddy from 1.14.16 to 1.14.17
  • f9cdbcd Added additional public api's to the documentation
  • eab4dca Removed printing java version
  • d86e009 Added maxxedev as contributor
  • 1f62d58 Fixed typo
  • Additional commits viewable in compare view

Updates io.github.hakky54:sslcontext-kickstart-for-netty from 8.1.1 to 8.3.6

Changelog

Sourced from io.github.hakky54:sslcontext-kickstart-for-netty's changelog.

v8.3.6

  • Bumped dependencies
  • Enhanced logging within LoggingX509ExtendedTrustManager
  • Exposed JDK (aka cacert) keystore and System property derived keystore in KeyStoreUtils

v8.3.5

  • Removed verbose debug logging for CertificateUtils
  • Added getters for hostname and port for TrustManagerParameters
  • Simplify usage of Security Provider
  • Bumped dependencies

v8.3.4

  • Bumped dependencies
  • Bug-fix added support for reloading ciphers in SSLEngine, SSLSocketFactory and SSLServerSocketFactory

v8.3.3

  • Added reloadable ciphers
  • Bumped dependencies

v8.3.2

  • Added custom security provider
  • Bumped dependencies
  • Bug-fix remove invalid characters when generating certificate alias
  • Bug-fix handle timout exception correctly on java 8 when extracting certificates

v8.3.1

  • Bumped dependencies
  • Added system name to the system trust manager
  • Bug-fix clear certificate collector after each fetch
  • Bug-fix resolve empty collector for certificate extracting client when disabling resolving root ca
  • Added timeout to certificate extracting client
  • Applied sonar recommendations

v8.3.0

  • Bumped dependencies
  • Added option to extract public key from private key
  • Added option to disable resolving root ca when extracting server certificates
  • Added options to exclude ciphers and protocols in the SSLFactory
  • Bug-fix allow adding new certificates in a nested TrustManager
  • Simplified adding certificates to TrustManager
  • Simplified swapping TrustManagers
  • Added JdkX509ExtendedTrustManager wrapper for JDK trusted CA's from cacerts
  • Added SystemX509ExtendedTrustManager wrapper for OS trusted CA's

v8.2.0

  • Added option to conceal trusted certificate names for a server
  • Bumped dependencies

v8.1.7

  • Resolved CVE-2023-33201 LDAP injection vulnerability caused by transitive dependency of Bouncy Castle in the library of sslcontext-kickstart-for-pem
  • Bumped dependencies
  • Filter out duplicate extracted certificates
  • Add appending capabilities to an existing keystore
  • Added option to extract port from uri

v8.1.6

  • Bug-fix Resolved antivirus alert by removing shell script layer from Mac OS X command to fetch system trusted Certificate Authorities
  • Bug-fix Resolved antivirus alert by excluding ~/Library/Keychains/login.keychain-db keychain file from MacCertificateUtils

... (truncated)

Commits
  • c4497e7 [maven-release-plugin] prepare release v8.3.6
  • 296514f Updated docs
  • f79b2dc Bump org.apache.maven.plugins:maven-enforcer-plugin from 3.4.1 to 3.5.0
  • a72d2c4 Bump org.apache.maven.plugins:maven-javadoc-plugin from 3.6.3 to 3.7.0
  • 74c16ac Bump org.sonatype.plugins:nexus-staging-maven-plugin
  • f2ae908 Bump version.byte-buddy from 1.14.16 to 1.14.17
  • f9cdbcd Added additional public api's to the documentation
  • eab4dca Removed printing java version
  • d86e009 Added maxxedev as contributor
  • 1f62d58 Fixed typo
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `sslcontext` from 8.1.1 to 8.3.6.

Updates `io.github.hakky54:sslcontext-kickstart` from 8.1.1 to 8.3.6
- [Changelog](https://github.com/Hakky54/sslcontext-kickstart/blob/master/CHANGELOG.md)
- [Commits](Hakky54/sslcontext-kickstart@v8.1.1...v8.3.6)

Updates `io.github.hakky54:sslcontext-kickstart-for-jetty` from 8.1.1 to 8.3.6
- [Changelog](https://github.com/Hakky54/sslcontext-kickstart/blob/master/CHANGELOG.md)
- [Commits](Hakky54/sslcontext-kickstart@v8.1.1...v8.3.6)

Updates `io.github.hakky54:sslcontext-kickstart-for-netty` from 8.1.1 to 8.3.6
- [Changelog](https://github.com/Hakky54/sslcontext-kickstart/blob/master/CHANGELOG.md)
- [Commits](Hakky54/sslcontext-kickstart@v8.1.1...v8.3.6)

---
updated-dependencies:
- dependency-name: io.github.hakky54:sslcontext-kickstart
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.github.hakky54:sslcontext-kickstart-for-jetty
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: io.github.hakky54:sslcontext-kickstart-for-netty
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <[email protected]>
@devinrsmith devinrsmith added this to the 0.37.0 milestone Sep 20, 2024
@devinrsmith devinrsmith self-requested a review September 20, 2024 16:58
@devinrsmith devinrsmith enabled auto-merge (squash) September 20, 2024 23:05
Copy link
Member

@devinrsmith devinrsmith left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Tested locally, TLS and mTLS.

@devinrsmith devinrsmith merged commit 74e39e4 into main Sep 20, 2024
22 checks passed
@devinrsmith devinrsmith deleted the dependabot/gradle/sslcontext-8.3.6 branch September 20, 2024 23:05
@github-actions github-actions bot locked and limited conversation to collaborators Sep 20, 2024
Sign up for free to subscribe to this conversation on GitHub. Already have an account? Sign in.
Projects
None yet
Development

Successfully merging this pull request may close these issues.

2 participants