From 51841554df8a7fdf6f086e2f471c97bed94be75c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Fri, 16 Oct 2026 23:54:36 +0000 Subject: [PATCH] Bump net.jsign:jsign-core from 6.0 to 7.6 Bumps [net.jsign:jsign-core](https://github.com/ebourg/jsign) from 6.0 to 7.6. - [Release notes](https://github.com/ebourg/jsign/releases) - [Changelog](https://github.com/ebourg/jsign/blob/master/RELEASE.md) - [Commits](https://github.com/ebourg/jsign/compare/6.0...7.6) --- updated-dependencies: - dependency-name: net.jsign:jsign-core dependency-version: '7.6' dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle b/build.gradle index 61cfdc0a..fd88318b 100644 --- a/build.gradle +++ b/build.gradle @@ -60,7 +60,7 @@ dependencies { // only used by plexus-archiver for formats DEB packages don't use (CVE-2025-67721, #500) exclude group: 'io.airlift', module: 'aircompressor' } - implementation 'net.jsign:jsign-core:6.0' + implementation 'net.jsign:jsign-core:7.6' implementation('org.redline-rpm:redline:1.2.10') { // the discontinued jdk15on Bouncy Castle has unfixed CVEs and duplicates jsign's jdk18on classes (#500) exclude group: 'org.bouncycastle', module: 'bcpg-jdk15on'