Merge pull request #136 from yetanalytics/update-bouncycastle

Update Bouncy Castle to 1.78

Author: kelvinqian00

CHANGELOG.md

@@ -1,5 +1,8 @@
 # Change Log
 
+## [0.4.4] - 2024-04-11
+- Update Bouncy Castle to 1.78 to address various CVEs.
+
 ## [0.4.3] - 2024-03-12
 - Update Clojure dependency to 1.11.2 to address CVE-2024-22871.
 

Makefile

@@ -2,7 +2,7 @@
 
 GROUP_ID ?= com.yetanalytics
 ARTIFACT_ID ?= datasim
-VERSION ?= 0.4.3
+VERSION ?= 0.4.4
 
 clean:
 	rm -rf target

README.md

@@ -15,7 +15,7 @@ DATASIM is funded by the Advanced Distributed Learning Initiative at US DoD.
 To use the core DATASIM library in your project, use the following dependency in your `deps.edn` file:
 
 ```clojure
-com.yetanalytics/datasim {:mvn/version "0.4.3"}
+com.yetanalytics/datasim {:mvn/version "0.4.4"}
 ```
 
 If you wish to install DATASIM as an application with features such as CLI or the webserver, perform the following steps:

deps.edn

@@ -45,7 +45,7 @@
                                               buddy/buddy-sign]}
               buddy/buddy-sign {:mvn/version "3.5.346"
                                 :exclusions  [org.bouncycastle/bcprov-jdk18on]}
-              org.bouncycastle/bcprov-jdk18on {:mvn/version "1.75"}}}
+              org.bouncycastle/bcprov-jdk18on {:mvn/version "1.78"}}}
   :run-server {:main-opts ["-m" "com.yetanalytics.datasim.server"]}
   :onyx {:extra-paths ["onyx-resources" "src/onyx"]
          :extra-deps {com.amazonaws/aws-java-sdk-s3 {:mvn/version "1.11.899"}