Skip to content

Story #16471: update droid to 6.9.14 #121

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
Regzox merged 1 commit into from
Sep 23, 2026
Merged

Story #16471: update droid to 6.9.14 #121

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
2 changes: 1 addition & 1 deletion pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -29,7 +29,7 @@
<!-- For HTML manipulation-->
<jsoup.version>1.23.2</jsoup.version>
<!-- For format identification (DROID from the UK National Archives)-->
<droid.version>6.8.0</droid.version>
<droid.version>6.9.14</droid.version>
<droidjaxb-impl.version>2.3.8</droidjaxb-impl.version>
<!-- For Windows shortcut manipulation TODO: exotic library to replace-->
<mslinks.version>1.0.6.2</mslinks.version>
Expand Down
19 changes: 16 additions & 3 deletions sedalib/pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -44,13 +44,26 @@
<groupId>org.apache.logging.log4j</groupId>
<artifactId>log4j-slf4j2-impl</artifactId>
</exclusion>
<!--bcprov-jdk15on is an end-of-life branch stuck on 1.68 with unpatched CVEs.
truevfs-comp-zip only needs the org.bouncycastle.crypto classes, which the
maintained bcprov-jdk18on artifact provides under the same package names.-->
<!--bcprov-jdk15on and bcprov-jdk15to18 are end-of-life branches stuck on old
versions with unpatched CVEs. truevfs-comp-zip and jwat-common only need the
org.bouncycastle classes, which the maintained bcprov-jdk18on artifact provides
under the same package names.-->
<exclusion>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk15on</artifactId>
</exclusion>
<exclusion>
<groupId>org.bouncycastle</groupId>
<artifactId>bcprov-jdk15to18</artifactId>
</exclusion>
<!--Droid 6.9 added S3 profile support, which drags in the whole AWS SDK and, through
netty-nio-client, netty. droid-core-interfaces declares eight artifacts of that
group, so excluding s3 alone left netty reachable through sso. Sedatools only
identifies files on the local filesystem, so the whole group is kept out.-->
<exclusion>
<groupId>software.amazon.awssdk</groupId>
<artifactId>*</artifactId>
</exclusion>
</exclusions>
</dependency>
<!--Replacement for the excluded, end-of-life bcprov-jdk15on needed by truevfs-comp-zip-->
Expand Down
Loading