I'm not very hopeful that anyone will see this, but I'll try anyway. :-)
The latest release of Jackcess Encrypt was 4.0.2 in November 2022. There was a commit on 2024-05-08, bumping the version of bouncycastle to 1.78 (which fixes several vulnerabilities), but there hasn't been a new release. Is there someone who could create one?
Last edit: Mats Sigge 2025-04-01
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
Thank you! 10 out of 10 service level. 😊 And yes, I know I can override the dependencies myself (and was in the process of doing just that), but a proper release is always nice.
👍
1
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
For info, I'm using Bouncy Castle 1.80 with jackcess-encrypt 4.0.2 to access and update MS Money (MSISAM) files and all is working well. Also, to add to the thanks for the continuing support and development of jackcess and jackcess-encrypt.
👍
1
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
yeah, as the library author, i try to keep dependencies at the minimum reasonable option so as not to push users ahead unnecessarily. as a library consumer, however, i'd encourage you to use the newest versions of any dependencies which are still compatible.
If you would like to refer to this comment somewhere else in this project, copy and paste the following link:
I'm not very hopeful that anyone will see this, but I'll try anyway. :-)
The latest release of Jackcess Encrypt was 4.0.2 in November 2022. There was a commit on 2024-05-08, bumping the version of bouncycastle to 1.78 (which fixes several vulnerabilities), but there hasn't been a new release. Is there someone who could create one?
Last edit: Mats Sigge 2025-04-01
sure, i can cut a new release. that said, you can always override the bouncycastle version in your own pom to use whatever version you desire.
pushed 4.0.3 release.
Thank you! 10 out of 10 service level. 😊 And yes, I know I can override the dependencies myself (and was in the process of doing just that), but a proper release is always nice.
For info, I'm using Bouncy Castle 1.80 with jackcess-encrypt 4.0.2 to access and update MS Money (MSISAM) files and all is working well. Also, to add to the thanks for the continuing support and development of jackcess and jackcess-encrypt.
yeah, as the library author, i try to keep dependencies at the minimum reasonable option so as not to push users ahead unnecessarily. as a library consumer, however, i'd encourage you to use the newest versions of any dependencies which are still compatible.