[Snyk] Upgrade org.bouncycastle:bcprov-jdk18on from 1.84 to 1.85

[martin-lindstrom]

Snyk has created this PR to upgrade org.bouncycastle:bcprov-jdk18on from 1.84 to 1.85.

ℹ️ Keep your dependencies up-to-date. This makes it easier to fix existing vulnerabilities and to more quickly identify and fix newly disclosed vulnerabilities when they affect your project.

---

• The recommended version is 1 version ahead of your current version.

• The recommended version was released 22 days ago.

Breaking Change Risk

Notice: This assessment is enhanced by AI.

---

Important

• Check the changes in this PR to ensure they won't cause issues with your project.
• This PR was automatically created by Snyk using the credentials of a real user.

---

Note: You are seeing this because you or someone else with access to this repository has authorized Snyk to open upgrade PRs.

For more information:

• 🧐 View latest project report
• 📜 Customise PR templates
• 🛠 Adjust upgrade PR settings
• 🔕 Ignore this dependency or unsubscribe from future upgrade PRs

[martin-lindstrom]

This is a minor, security-focused upgrade from version 1.84 to 1.85. While no mandatory API removals are documented, the release notes describe it as a "significant hardening of the APIs" as a result of advanced code analysis. [1]

Key Changes:

• API Hardening: This may introduce stricter validation or minor behavioral changes. Code that previously worked with more lenient inputs might now fail. Verification is recommended.
• Security Fixes: The release addresses multiple CVEs, and the Bouncy Castle team strongly encourages users to update. [2, 9]
• New Features: The release adds significant new functionality, including expanded Post-Quantum Cryptography (PQC) support, a new high-level CAdES API for electronic signatures, and modernized CMS capabilities. These changes are primarily additive. [1]

Recommendation:
Given the API hardening, it is important to perform regression testing after the upgrade to ensure that existing cryptographic operations behave as expected. Pay close attention to areas where your application might be passing ambiguous or non-standard data.

Source: Bouncy Castle 1.85 Release Announcement [1]

Notice 🤖: This content was augmented using artificial intelligence. AI-generated content may contain errors and should be reviewed for accuracy before use.