The GitHub Actions job "Required Checks" on 
texera.git/backport/bouncycastle-184-v1.2 has failed.
Run started by GitHub user Yicong-Huang (triggered by Yicong-Huang).

Head commit for run:
0c58ddf3deede518e5bb5b5a330ea481dd2eb38b / Yicong Huang 
<[email protected]>
fix(deps): upgrade bouncycastle to fix CVE-2025-14813 (#6286)

Backport of #6286 to release/v1.2.

Pins the Bouncy Castle JDK 18 artifacts to 1.84 via shared sbt
dependencyOverrides (bcpkix/bcprov/bcutil-jdk18on), and updates
computing-unit-managing-service/LICENSE-binary to match the resolved
bundled jar versions.

Adapted to the v1.2 build.sbt structure: v1.2 has no commonModuleSettings
aggregate, so the overrides are appended to asfLicensingSettings and
asfLicensingSettingsWithVendored, which every module applies.

Related security report:
https://github.com/apache/texera/security/dependabot/782

Verified with:
JAVA_HOME=$(/usr/libexec/java_home -v 17) sbt 'show 
ComputingUnitManagingService / dependencyOverrides' 'show 
ComputingUnitManagingService / update'
All three artifacts resolve to 1.84.

Co-Authored-By: Claude Opus 4.8 (1M context) <[email protected]>

Report URL: https://github.com/apache/texera/actions/runs/29117179337

With regards,
GitHub Actions via GitBox

Reply via email to