Yicong-Huang opened a new pull request, #6286: URL: https://github.com/apache/texera/pull/6286
### What changes were proposed in this PR? This PR pins the Bouncy Castle JDK 18 artifacts to `1.84` through shared sbt `dependencyOverrides`: | Artifact | Version | | --- | --- | | `org.bouncycastle:bcpkix-jdk18on` | `1.84` | | `org.bouncycastle:bcprov-jdk18on` | `1.84` | | `org.bouncycastle:bcutil-jdk18on` | `1.84` | It also updates `computing-unit-managing-service/LICENSE-binary` to match the resolved bundled jar versions. ### Any related issues, documentation, discussions? Related security report: https://github.com/apache/texera/security/dependabot/782 ### How was this PR tested? ```bash JAVA_HOME=$(/usr/libexec/java_home -v 17) sbt 'show ComputingUnitManagingService / dependencyOverrides' 'show ComputingUnitManagingService / update' | rg 'bouncycastle|bcprov|bcpkix|bcutil|\[success\]|\[error\]' ``` Confirmed `bcpkix-jdk18on`, `bcprov-jdk18on`, and `bcutil-jdk18on` all resolve to `1.84`. I also attempted: ```bash JAVA_HOME=$(/usr/libexec/java_home -v 17) sbt 'ComputingUnitManagingService / dist' ``` That local dist build was blocked in a fresh worktree because Postgres was not running for JOOQ code generation, so generated `org.apache.texera.dao.jooq.generated.*` classes were unavailable. This is an environment/setup blocker rather than a dependency resolution failure. ### Was this PR authored or co-authored using generative AI tooling? Generated-by: Codex (GPT-5) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
