Skip to content

[3.3] Bump org.bouncycastle:bc-fips from 2.1.1 to 2.1.2#19817

Merged
cwperks merged 3 commits intoopensearch-project:3.3from
cwperks:bump-bc-fips-3.3
Oct 29, 2025
Merged

[3.3] Bump org.bouncycastle:bc-fips from 2.1.1 to 2.1.2#19817
cwperks merged 3 commits intoopensearch-project:3.3from
cwperks:bump-bc-fips-3.3

Conversation

@cwperks
Copy link
Copy Markdown
Member

@cwperks cwperks commented Oct 29, 2025

Description

Bump org.bouncycastle:bc-fips from 2.1.1 to 2.1.2

Related Issues

Resolves https://nvd.nist.gov/vuln/detail/CVE-2025-12194

Check List

  • Functionality includes testing.
  • API changes companion pull request created, if applicable.
  • Public documentation issue/PR created, if applicable.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

Signed-off-by: Craig Perkins <cwperx@amazon.com>
@cwperks cwperks requested a review from a team as a code owner October 29, 2025 20:24
Signed-off-by: Craig Perkins <cwperx@amazon.com>
@owaiskazi19
Copy link
Copy Markdown
Member

Need to forward port to main as well

Signed-off-by: Craig Perkins <cwperx@amazon.com>
@cwperks
Copy link
Copy Markdown
Member Author

cwperks commented Oct 29, 2025

Re-running precommit. It failed in the last run without a reason.

@github-actions
Copy link
Copy Markdown
Contributor

✅ Gradle check result for 442d378: SUCCESS

@codecov
Copy link
Copy Markdown

codecov bot commented Oct 29, 2025

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 72.94%. Comparing base (0840659) to head (442d378).
⚠️ Report is 2 commits behind head on 3.3.

Additional details and impacted files
@@             Coverage Diff              @@
##                3.3   #19817      +/-   ##
============================================
- Coverage     73.09%   72.94%   -0.15%     
+ Complexity    70558    70455     -103     
============================================
  Files          5717     5717              
  Lines        323059   323059              
  Branches      46792    46792              
============================================
- Hits         236124   235669     -455     
- Misses        67915    68365     +450     
- Partials      19020    19025       +5     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:
  • ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

@cwperks cwperks merged commit 6564992 into opensearch-project:3.3 Oct 29, 2025
34 of 57 checks passed
opensearch-trigger-bot bot pushed a commit that referenced this pull request Oct 29, 2025
(cherry picked from commit 6564992)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
@opensearch-trigger-bot
Copy link
Copy Markdown
Contributor

The backport to 2.19 failed:

The process '/usr/bin/git' failed with exit code 128

To backport manually, run these commands in your terminal:

# Navigate to the root of your repository
cd $(git rev-parse --show-toplevel)
# Fetch latest updates from GitHub
git fetch
# Create a new working tree
git worktree add ../.worktrees/OpenSearch/backport-2.19 2.19
# Navigate to the new working tree
pushd ../.worktrees/OpenSearch/backport-2.19
# Create a new branch
git switch --create backport/backport-19817-to-2.19
# Cherry-pick the merged commit of this pull request and resolve the conflicts
git cherry-pick -x --mainline 1 6564992150e26aaa62d4522a220dfff5188aeb88
# Push it to GitHub
git push --set-upstream origin backport/backport-19817-to-2.19
# Go back to the original working tree
popd
# Delete the working tree
git worktree remove ../.worktrees/OpenSearch/backport-2.19

Then, create a pull request where the base branch is 2.19 and the compare/head branch is backport/backport-19817-to-2.19.

cwperks added a commit that referenced this pull request Oct 30, 2025
* [3.3] Bump org.bouncycastle:bc-fips from 2.1.1 to 2.1.2 (#19817)

(cherry picked from commit 6564992)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

* Add to CHANGELOG

Signed-off-by: Craig Perkins <cwperx@amazon.com>

* Add more sha files

Signed-off-by: Craig Perkins <cwperx@amazon.com>

---------

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Signed-off-by: Craig Perkins <cwperx@amazon.com>
Signed-off-by: Sandesh Kumar <sandeshkr419@gmail.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Craig Perkins <cwperx@amazon.com>
Co-authored-by: Sandesh Kumar <sandeshkr419@gmail.com>
anandpatel9998 pushed a commit to anandpatel9998/OpenSearch that referenced this pull request Nov 3, 2025
…#19818)

* [3.3] Bump org.bouncycastle:bc-fips from 2.1.1 to 2.1.2 (opensearch-project#19817)

(cherry picked from commit 6564992)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

* Add to CHANGELOG

Signed-off-by: Craig Perkins <cwperx@amazon.com>

* Add more sha files

Signed-off-by: Craig Perkins <cwperx@amazon.com>

---------

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Signed-off-by: Craig Perkins <cwperx@amazon.com>
Signed-off-by: Sandesh Kumar <sandeshkr419@gmail.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Craig Perkins <cwperx@amazon.com>
Co-authored-by: Sandesh Kumar <sandeshkr419@gmail.com>
liuguoqingfz pushed a commit to liuguoqingfz/OpenSearch that referenced this pull request Dec 15, 2025
…#19818)

* [3.3] Bump org.bouncycastle:bc-fips from 2.1.1 to 2.1.2 (opensearch-project#19817)

(cherry picked from commit 6564992)
Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>

* Add to CHANGELOG

Signed-off-by: Craig Perkins <cwperx@amazon.com>

* Add more sha files

Signed-off-by: Craig Perkins <cwperx@amazon.com>

---------

Signed-off-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Signed-off-by: Craig Perkins <cwperx@amazon.com>
Signed-off-by: Sandesh Kumar <sandeshkr419@gmail.com>
Co-authored-by: github-actions[bot] <github-actions[bot]@users.noreply.github.com>
Co-authored-by: Craig Perkins <cwperx@amazon.com>
Co-authored-by: Sandesh Kumar <sandeshkr419@gmail.com>
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants