+++ /dev/null
-# !! The current version is unsafe, see:
-# https://github.com/bcgit/bc-java/wiki/CVE-2022-45146
-Argeo-Origin-M2: org.bouncycastle:bc-noncert:1.0.2.4
-Argeo-Origin-URI: https://downloads.bouncycastle.org/fips-java/bc-noncert-1.0.2.4.jar
-Argeo-Origin-Sources-URI: https://downloads.bouncycastle.org/fips-java/bc-noncert-1.0.2.4-sources.jar
SPDX-License-Identifier: MIT
+# FIXME OSGi metadata not available in BC FIPS v2.0.0
Argeo-Origin-NoMetadataGeneration: true
Argeo-Origin-Do-Not-Modify: true
Argeo-Origin-M2: :1.0.2.5
\ No newline at end of file
+++ /dev/null
-SPDX-License-Identifier: CC0-1.0
-Argeo-Origin-M2: net.i2p.crypto:eddsa:0.3.0
-Import-Package: \
-sun.*;resolution:="optional", \
-*
--- /dev/null
+SPDX-License-Identifier: CC0-1.0
+Argeo-Origin-M2: net.i2p.crypto:eddsa:0.3.0
+Import-Package: \
+sun.*;resolution:="optional", \
+*
-Argeo-Origin-M2: :5.14.0
+Argeo-Origin-M2: :5.15.0
SPDX-License-Identifier: LGPL-2.1-or-later OR Apache-2.0
-Argeo-Origin-M2: :5.14.0
+Argeo-Origin-M2: :5.15.0
SPDX-License-Identifier: LGPL-2.1-or-later OR Apache-2.0
-Argeo-Origin-M2: :5.14.0
+Argeo-Origin-M2: :5.15.0
SPDX-License-Identifier: LGPL-2.1-or-later OR Apache-2.0
-Argeo-Origin-M2: :5.14.0
+Argeo-Origin-M2: :5.15.0
SPDX-License-Identifier: LGPL-2.1-or-later OR Apache-2.0
SPDX-License-Identifier: GPL-2.0-only WITH Classpath-exception-2.0 OR EPL-2.0
-Argeo-Origin-M2: jakarta.servlet:jakarta.servlet-api:6.0.0
+Argeo-Origin-M2: jakarta.servlet:jakarta.servlet-api:6.1.0
Argeo-Origin-NoMetadataGeneration: true
SPDX-License-Identifier: GPL-2.0-only WITH Classpath-exception-2.0 OR EPL-2.0
-Argeo-Origin-M2: jakarta.websocket:jakarta.websocket-api:2.0.0
+Argeo-Origin-M2: jakarta.websocket:jakarta.websocket-client-api:2.2.0
Argeo-Origin-NoMetadataGeneration: true
--- /dev/null
+SPDX-License-Identifier: GPL-2.0-only WITH Classpath-exception-2.0 OR EPL-2.0
+Argeo-Origin-M2: jakarta.websocket:jakarta.websocket-api:2.2.0
+Argeo-Origin-NoMetadataGeneration: true
+++ /dev/null
-SPDX-License-Identifier: GPL-2.0-only WITH Classpath-exception-2.0 OR CDDL-1.1
-Argeo-Origin-M2: jakarta.websocket:jakarta.websocket-api:1.1.2
-Argeo-Origin-NoMetadataGeneration: true
Bundle-SymbolicName: org.eclipse.jetty.websocket
SPDX-License-Identifier: Apache-2.0 OR EPL-2.0
Argeo-Origin-M2: :12.0.13
-# TODO split ee8 and ee10 ?
Argeo-Origin-M2-Merge: \
org.eclipse.jetty.websocket:jetty-websocket-core-client, \
org.eclipse.jetty.websocket:jetty-websocket-core-common, \
org.eclipse.jetty.websocket:jetty-websocket-jetty-client, \
org.eclipse.jetty.websocket:jetty-websocket-jetty-common, \
org.eclipse.jetty.websocket:jetty-websocket-jetty-server,\
-org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-servlet, \
-org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-common, \
-org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-api, \
-org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-client, \
-org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-common, \
-org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-javax-server,\
-org.eclipse.jetty.ee8.websocket:jetty-ee8-websocket-jetty-server, \
org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-servlet, \
org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-client, \
org.eclipse.jetty.ee10.websocket:jetty-ee10-websocket-jakarta-common, \
Import-Package: \
!java.*, \
-org.eclipse.jetty.ee8.webapp;resolution:="optional", \
org.eclipse.jetty.ee10.webapp;resolution:="optional", \
*
\ No newline at end of file
SPDX-License-Identifier: Apache-2.0
-Argeo-Origin-M2: :1.64.0
\ No newline at end of file
+Argeo-Origin-M2: :1.68.0
\ No newline at end of file
+++ /dev/null
-#FIXME: keep version in sync with sys!
-SPDX-License-Identifier: Apache-2.0
-Argeo-Origin-M2: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.17.1
-Argeo-Origin-NoMetadataGeneration: true
SPDX-License-Identifier: EPL-2.0
Bundle-SymbolicName: org.junit.jupiter
-Argeo-Origin-M2: :5.10.2
+Argeo-Origin-M2: :5.11.1
Argeo-Origin-M2-Merge: \
org.junit.jupiter:junit-jupiter-api, \
org.junit.jupiter:junit-jupiter-engine, \
SPDX-License-Identifier: EPL-2.0
Bundle-SymbolicName: org.junit.platform
-Argeo-Origin-M2: :1.10.2
+Argeo-Origin-M2: :1.11.1
Argeo-Origin-M2-Merge: \
org.junit.platform:junit-platform-commons, \
org.junit.platform:junit-platform-console, \
SPDX-License-Identifier: BSD-3-Clause
+# Note: we stick with v1.3, since this is what JUnit uses
Argeo-Origin-M2: org.hamcrest:hamcrest-core:1.3
SPDX-License-Identifier: EPL-2.0
-Argeo-Origin-M2: org.junit.vintage:junit-vintage-engine:5.10.2
\ No newline at end of file
+# TODO Put it in the merged jar, since it is always the same version?
+Argeo-Origin-M2: org.junit.vintage:junit-vintage-engine:5.11.1
\ No newline at end of file
SPDX-License-Identifier: MIT
+# TODO Check whether this project is dead
+Argeo-Origin-M2: org.redline-rpm:redline:1.2.10
Import-Package: sun.security.*;resolution:=optional,
org.apache.tools.ant.*;resolution:=optional,
org.apache.tools.zip;resolution:=optional,
*
-Argeo-Origin-M2: org.redline-rpm:redline:1.2.10
SPDX-License-Identifier: Apache-2.0
# No sources available in v2.13.0
-Argeo-Origin-M2: :2.12.1
\ No newline at end of file
+Argeo-Origin-M2: :2.13.2
-Argeo-Origin-M2: net.java.dev.jna:jna-platform:5.14.0
+Argeo-Origin-M2: net.java.dev.jna:jna-platform:5.15.0
SPDX-License-Identifier: Apache-2.0
Argeo-Origin-NoMetadataGeneration: true
--- /dev/null
+# Note: no needed in platform but by some fancy libraries in apps.
+# Since it is small, we keep it here, in order to avoid duplication of version maintenance
+Argeo-Origin-M2: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
+Argeo-Origin-NoMetadataGeneration: true
SPDX-License-Identifier: Apache-2.0
-Argeo-Origin-M2: commons-codec:commons-codec:1.17.0
+Argeo-Origin-M2: commons-codec:commons-codec:1.17.1
SPDX-License-Identifier: Apache-2.0
-Argeo-Origin-M2: org.apache.commons:commons-compress:1.26.2
+Argeo-Origin-M2: org.apache.commons:commons-compress:1.27.1
Import-Package: \
org.brotli.*;resolution:=optional,
org.tukaani.*;resolution:=optional,
SPDX-License-Identifier: BSD-3-Clause
-Argeo-Origin-M2: org.eclipse.jgit:org.eclipse.jgit:6.10.0.202406032230-r
+Argeo-Origin-M2: org.eclipse.jgit:org.eclipse.jgit:7.0.0.202409031743-r
Import-Package: \
sun.*;resolution:=optional, \
com.jcraft.jsch;resolution:=optional, \
SPDX-License-Identifier: BSD-3-Clause
-Argeo-Origin-M2: org.jline:jline:3.26.2
+Argeo-Origin-M2: org.jline:jline:3.26.3
Import-Package:\
sun.misc.*;resolution:="optional",\
com.sun.jna.*;resolution:="optional",\
SPDX-License-Identifier: CC0-1.0
-Argeo-Origin-M2: org.tukaani:xz:1.9
+Argeo-Origin-M2: org.tukaani:xz:1.10
# this is actually dnsjava, see https://github.com/dnsjava/dnsjava
SPDX-License-Identifier: BSD-3-Clause
-Argeo-Origin-M2: dnsjava:dnsjava:3.6.1
+Argeo-Origin-M2: dnsjava:dnsjava:3.6.2
Argeo-Origin-NoMetadataGeneration: true
SPDX-License-Identifier: LGPL-2.0
# TODO Check whether relicensing of this fork was allowed
#SPDX-License-Identifier: MIT
+# TODO: stuck with v4.x because de.thjom.java.systemd is not compatible with v5.x
Argeo-Origin-M2: :4.3.2
Export-Package: org.freedesktop.dbus.*
Argeo-Origin-M2-Merge: \
SPDX-License-Identifier: Apache-2.0
-Argeo-Origin-M2: commons-cli:commons-cli:1.8.0
+Argeo-Origin-M2: commons-cli:commons-cli:1.9.0
SPDX-License-Identifier: Apache-2.0
-Argeo-Origin-M2: commons-io:commons-io:2.16.1
+Argeo-Origin-M2: commons-io:commons-io:2.17.0
Import-Package: sun.*;resolution:=optional, *
#Argeo-Origin-M2: com.h2database:h2:2.1.214
# New format (3) was introduced with 2.2.220
-Argeo-Origin-M2: com.h2database:h2:2.2.224
+Argeo-Origin-M2: com.h2database:h2:2.3.232
Import-Package:\
jakarta.*;resolution:=optional,\
SPDX-License-Identifier: BSD-3-Clause
-Argeo-Origin-M2: org.locationtech.jts:jts-core:1.19.0
\ No newline at end of file
+Argeo-Origin-M2: org.locationtech.jts:jts-core:1.20.0
\ No newline at end of file
SPDX-License-Identifier: BSD-2-Clause
-Argeo-Origin-M2: org.postgresql:postgresql:42.7.3
+Argeo-Origin-M2: org.postgresql:postgresql:42.7.4
Import-Package:\
org.osgi.service.jdbc;resolution:="optional",\
com.sun.jna.*;resolution:="optional",\
Bundle-SymbolicName: org.eclipse.parsson
SPDX-License-Identifier: GPL-2.0-only WITH Classpath-exception-2.0 OR EPL-2.0
-Argeo-Origin-M2: :1.1.6
+Argeo-Origin-M2: :1.1.7
Export-Package: org.eclipse.*, jakarta.*
Import-Package:\
org.glassfish.hk2.osgiresourcelocator;resolution:="optional",\
+++ /dev/null
-SPDX-License-Identifier: EPL-2.0
-Argeo-Origin-M2: org.osgi:org.osgi.service.servlet:2.0.0
-#Argeo-Origin-NoMetadataGeneration: true
-Subproject commit f1e050d4627819e7420fc4dadb8af34e7e766233
+Subproject commit e8a1577a0971cc5be91b100028020e0de3b710e5