Yicong-Huang opened a new pull request, #6316: URL: https://github.com/apache/texera/pull/6316
### What changes were proposed in this PR? Backport of #6286 to `release/v1.2`. Pins the Bouncy Castle JDK 18 artifacts to `1.84` through shared sbt `dependencyOverrides`: | Artifact | Version | | --- | --- | | `org.bouncycastle:bcpkix-jdk18on` | `1.84` | | `org.bouncycastle:bcprov-jdk18on` | `1.84` | | `org.bouncycastle:bcutil-jdk18on` | `1.84` | It also updates `computing-unit-managing-service/LICENSE-binary` to match the resolved bundled jar versions. **Adaptation note:** `main` has a refactored `build.sbt` with a `commonModuleSettings` aggregate that #6286 hooked into. `release/v1.2` has no such aggregate — every module applies `asfLicensingSettings` / `asfLicensingSettingsWithVendored` directly — so the overrides are appended to those two instead. Functionally equivalent. ### Any related issues, documentation, discussions? Related security report: https://github.com/apache/texera/security/dependabot/782 ### How was this PR tested? ```bash JAVA_HOME=$(/usr/libexec/java_home -v 17) sbt 'show ComputingUnitManagingService / dependencyOverrides' 'show ComputingUnitManagingService / update' | rg 'bouncycastle|bcprov|bcpkix|bcutil|\[success\]|\[error\]' ``` Confirmed `bcpkix-jdk18on`, `bcprov-jdk18on`, and `bcutil-jdk18on` all resolve to `1.84`. ### Was this PR authored or co-authored using generative AI tooling? Generated-by: Claude (Opus 4.8) 🤖 Generated with [Claude Code](https://claude.com/claude-code) -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
