)]}'
{
  "commit": "3f3dbb996368065f7c23aeb1688277e984b55eb1",
  "tree": "d8214394ae530dd294354d64be9a393f9fe4a766",
  "parents": [
    "78b0a15c95c7546170b6eb87dc34c0485b5c092e"
  ],
  "author": {
    "name": "Jinwoo Hwang",
    "email": "92374539+JinwooHwang@users.noreply.github.com",
    "time": "Tue May 12 08:07:15 2026 -0400"
  },
  "committer": {
    "name": "GitHub",
    "email": "noreply@github.com",
    "time": "Tue May 12 08:07:15 2026 -0400"
  },
  "message": "GEODE-10583: Upgrade transitive bcprov-jdk18on from 1.82 to 1.84 (#8008)\n\nPin org.bouncycastle:bcprov-jdk18on (transitive via org.apache.shiro:shiro-crypto-hash:2.1.0) to 1.84 to remediate CVE-2026-0636 (LDAP Injection), CVE-2026-5598 (Covert Timing Channel in FrodoEngine), and CVE-2025-14813 (broken GOSTCTR in G3413CTRBlockCipher), all of which affect 1.82 and are fixed in 1.84.\n\n- Add bouncycastle.version\u003d1.84 and api constraint in DependencyConstraints.groovy\n- Update integration-test classpath fixtures to reference bcprov-jdk18on-1.84.jar",
  "tree_diff": [
    {
      "type": "modify",
      "old_id": "ec9f9f84c720e0b223fb8c672bef68c9c2a654bc",
      "old_mode": 33188,
      "old_path": "build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy",
      "new_id": "d71e6717badd74d52ad72b12d9e21a4c7fc2acff",
      "new_mode": 33188,
      "new_path": "build-tools/geode-dependency-management/src/main/groovy/org/apache/geode/gradle/plugins/DependencyConstraints.groovy"
    },
    {
      "type": "modify",
      "old_id": "786c91cbf284f235ab00a4c1d005cfd2e9d02e92",
      "old_mode": 33188,
      "old_path": "geode-assembly/src/integrationTest/resources/assembly_content.txt",
      "new_id": "c769db89d0e5f60144ccef93fc7ded13dca632a2",
      "new_mode": 33188,
      "new_path": "geode-assembly/src/integrationTest/resources/assembly_content.txt"
    },
    {
      "type": "modify",
      "old_id": "c41d8f1344d1f4bb88c5d6236c8b08eb4ea8caf2",
      "old_mode": 33188,
      "old_path": "geode-assembly/src/integrationTest/resources/gfsh_dependency_classpath.txt",
      "new_id": "b39d44afd5e4053e1119ab512d71896a5b6a88e9",
      "new_mode": 33188,
      "new_path": "geode-assembly/src/integrationTest/resources/gfsh_dependency_classpath.txt"
    },
    {
      "type": "modify",
      "old_id": "2071d8d928db361c06021ff574d567bf3cf1c5b8",
      "old_mode": 33188,
      "old_path": "geode-server-all/src/integrationTest/resources/dependency_classpath.txt",
      "new_id": "6b665995a617e59621779c64cc9e4386c15edc4a",
      "new_mode": 33188,
      "new_path": "geode-server-all/src/integrationTest/resources/dependency_classpath.txt"
    }
  ]
}