(maven-wagon) branch master updated: Upgrade plexus-utils, Bouncy Castle, MINA and plexus-archiver to fix security advisories

[slachiewicz]

This is an automated email from the ASF dual-hosted git repository.

slachiewicz pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven-wagon.git


The following commit(s) were added to refs/heads/master by this push:
     new 0fbf3b57 Upgrade plexus-utils, Bouncy Castle, MINA and plexus-archiver 
to fix security advisories
0fbf3b57 is described below

commit 0fbf3b5755529094d68450c1ff7acf2ab1c42541
Author: Sylwester Lachiewicz <slachiew...@apache.org>
AuthorDate: Thu Oct 29 23:47:28 2026 +0000

    Upgrade plexus-utils, Bouncy Castle, MINA and plexus-archiver to fix 
security advisories
---
 pom.xml | 33 ++++++++++++++++++++++++++++++++-
 1 file changed, 32 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index c82f3b70..08a66aa6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -160,7 +160,7 @@ under the License.
     
<maven.test.redirectTestOutputToFile>true</maven.test.redirectTestOutputToFile>
     <slf4jVersion>1.7.36</slf4jVersion>
     <maven.site.path>wagon-archives/wagon-LATEST</maven.site.path>
-    <version.plexus-utils>3.6.0</version.plexus-utils>
+    <version.plexus-utils>3.6.1</version.plexus-utils>
     <guiceVersion>5.1.0</guiceVersion>
     <!-- because doxia parser doesn't like the real one -->
     
<mavenSitePluginVersion>${version.maven-site-plugin}</mavenSitePluginVersion>
@@ -248,6 +248,37 @@ under the License.
         <type>pom</type>
         <scope>import</scope>
       </dependency>
+      <!-- test-only transitives of ftpserver, sshd-git and maven-scm-test 
with known advisories -->
+      <dependency>
+        <groupId>org.apache.mina</groupId>
+        <artifactId>mina-core</artifactId>
+        <version>2.2.10</version>
+      </dependency>
+      <dependency>
+        <groupId>org.bouncycastle</groupId>
+        <artifactId>bcpg-jdk18on</artifactId>
+        <version>1.85</version>
+      </dependency>
+      <dependency>
+        <groupId>org.bouncycastle</groupId>
+        <artifactId>bcpkix-jdk18on</artifactId>
+        <version>1.85</version>
+      </dependency>
+      <dependency>
+        <groupId>org.bouncycastle</groupId>
+        <artifactId>bcprov-jdk18on</artifactId>
+        <version>1.85</version>
+      </dependency>
+      <dependency>
+        <groupId>org.bouncycastle</groupId>
+        <artifactId>bcutil-jdk18on</artifactId>
+        <version>1.85</version>
+      </dependency>
+      <dependency>
+        <groupId>org.codehaus.plexus</groupId>
+        <artifactId>plexus-archiver</artifactId>
+        <version>4.8.0</version>
+      </dependency>
       <dependency>
         <groupId>javax.servlet</groupId>
         <artifactId>javax.servlet-api</artifactId>