Skip to content

Commit 4f596e0

Browse files
Release new version
1 parent 8e09c7a commit 4f596e0

5 files changed

Lines changed: 29 additions & 32 deletions

File tree

‎.changeset/rare-olives-jog.md‎

Lines changed: 0 additions & 5 deletions
This file was deleted.

‎.changeset/true-moose-pick.md‎

Lines changed: 0 additions & 25 deletions
This file was deleted.

‎CHANGELOG.md‎

Lines changed: 27 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,32 @@
11
# evervault-java
22

3+
## 4.3.0
4+
5+
### Minor Changes
6+
7+
- 8e09c7a: Allow constructing with a JWK for encrypting offline
8+
- ded16a9: Upgrade BouncyCastle from `bcprov-jdk15on:1.70` to `bcprov-jdk18on:1.84` to
9+
pick up outstanding security fixes and move off the unmaintained `jdk15on`
10+
line.
11+
12+
**Action required for some consumers.** The Maven coordinate changed
13+
(`bcprov-jdk15on` → `bcprov-jdk18on`), but both jars ship classes under
14+
identical `org.bouncycastle.*` packages. If your project also pulls in
15+
`bcprov-jdk15on` directly or transitively via another dependency, you will
16+
end up with both jars on the classpath — build tools don't dedupe across
17+
different artifact ids. Classloader ordering then decides which BC "wins"
18+
at runtime, which can cause subtle crypto failures. Evict any remaining
19+
`bcprov-jdk15on` from your dependency tree (Gradle `exclude`, Maven
20+
`<exclusions>`), or add an explicit dependency on `bcprov-jdk18on` at the
21+
version you want.
22+
23+
`InvalidCipherException` gains a new public constructor
24+
`InvalidCipherException(Throwable cause)` that preserves the underlying
25+
cause. The existing `InvalidCipherException(InvalidCipherTextException)`
26+
constructor is now `@Deprecated` because it leaks BouncyCastle types into
27+
the SDK's public API; it will be removed in the next major release. Switch
28+
any direct construction to the `Throwable` overload.
29+
330
## 4.2.0
431

532
### Minor Changes

‎lib/build.gradle‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -6,7 +6,7 @@ plugins {
66
}
77

88
group 'com.evervault'
9-
version '4.2.0'
9+
version '4.3.0'
1010

1111
repositories {
1212
mavenCentral()

‎package.json‎

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -1,7 +1,7 @@
11
{
22
"name": "evervault-java",
33
"private": true,
4-
"version": "4.2.0",
4+
"version": "4.3.0",
55
"scripts": {
66
"version": "changeset version && PACKAGE_VERSION=$(node -p \"require('./package.json').version\") && sed -i \"s/version '.*'/version '$PACKAGE_VERSION'/g\" lib/build.gradle"
77
},

0 commit comments

Comments
 (0)