Skip to content

Bump pgpainless from 1.7.6 to 2.0.3#26

Merged
github-actions[bot] merged 1 commit into
mainfrom
dependabot/gradle/pgpainless-2.0.3
Apr 16, 2026
Merged

Bump pgpainless from 1.7.6 to 2.0.3#26
github-actions[bot] merged 1 commit into
mainfrom
dependabot/gradle/pgpainless-2.0.3

Conversation

@dependabot
Copy link
Copy Markdown
Contributor

@dependabot dependabot Bot commented on behalf of github Apr 16, 2026

Bumps pgpainless from 1.7.6 to 2.0.3.
Updates org.pgpainless:pgpainless-core from 1.7.6 to 2.0.3

Release notes

Sourced from org.pgpainless:pgpainless-core's releases.

PGPainless-CLI 2.0.3

PGPainless 2.0.3

This release bumps BC to 1.84 and fixes a major bug preventing certain OpenPGP operations if the key/certificate contained recent third-party signatures (#498).

PGPainless-CLI 2.0.2

No release notes provided.

PGPainless-CLI 2.0.1

No release notes provided.

PGPainless-CLI 2.0.0

PGPainless 2.0.0

PGPainless-CLI 1.7.7

PGPainless 1.7.7

Changelog

Sourced from org.pgpainless:pgpainless-core's changelog.

2.0.3

  • Bump bcpg-jdk8on to 1.84
  • Bump bcprov-jdk18on to 1.84
  • Bump sop-java to 15.0.1
  • Bump logback-classic to 1.5.25
  • sop encrypt: For symmetric-key encryption; default to rfc4880 packet format
  • sop list-profiles encrypt: Add profile descriptions
  • sop generate-key: Do not add expiration date
  • sop encrypt:
    • Add support for --for={communications|storage|any} flag
    • Return exit code 17 for expired certs
  • sop update-key: Add encryption subkey if --signing-only is missing
  • Fix issue, where third-party certification is considered during encryption (#495)
  • Treat literal data packets with non-standard format octets as binary (#496)

2.0.2

  • Add PGPainless.asciiArmor(Collection<OpenPGPCertificate>, PacketFormat)
  • SigningOptions: Add missing @JvmOverloads annotations to addInlineSignature() and addDetachedSignature()
  • OpenPGPComponentKey: Add extension method getSecretKey()
  • OpenPGPKey: Add extension methods isFullyDecrypted(), isFullyEncrypted()
  • KeyRingBuilder: Properly respect custom key creation time on subkeys and signatures
  • WeakRSAKeyTest: Disable test if test vector key is expired at testing time
  • MessageMetadata: Add missing methods
    • isVerifiedInlineSignedBy(OpenPGPCertificate)
    • isVerifiedDetachedSignedBy(OpenPGPCertificate)
  • Bump sop-java to 14.0.3
  • Bump logback-core to 1.5.19
  • Fix exception when changing subkey passphrase on key with stripped primary key (thanks @​agrahn for reporting)

2.0.1

  • Fix subkey signatures on generate keys (#486, thanks to @​agrahn for reporting)

2.0.0

  • Add support for OpenPGP v6
  • PGPainless is no longer intended for singleton use
  • Internally make use of BCs new high-level API
  • Bump sop-java to 14.0.1
    • Implement new sop update-key command to refresh old keys to a usable state
    • Implement new sop merge-certs command to merge certificate copies
    • Implement new sop certify-userid command to certify third-party certificates
    • Implement new sop validate-userid command to validate userids on keys
    • sop generate-key: Add profile rfc9580-curve25519 for generating v6 keys over curve25519
    • sop generate-key: Add profile rfc9580-curve448 for generating v6 keys over curve448
    • sop encrypt: Add profile rfc9580 for v6-style symmetric message encryption

1.7.7

  • Bump bcpg-jdk8on to 1.82
  • Bump bcprov-jdk18on to 1.82
  • Fix handling of passphrases and user-ids containing leading/trailing whitespace
Commits
  • 27accc1 PGPainless 2.0.3
  • 52b3977 Update changelog
  • f763dba pgpainless-sop README: Update dependency version and sop spec revision
  • 1ef1ac6 BC 1.84 still chokes on hardware-secrets secret key
  • 5760945 Update changelog
  • b883188 Bump BC to 1.84
  • 5f9a288 Merge pull request #499 from pgpainless/thirdpartySigs
  • 5e31cfe Improve example code
  • 5700d3e Bump bc to 1.84-SNAPSHOT
  • 6d550fc Remove superfluous imports
  • Additional commits viewable in compare view

Updates org.pgpainless:pgpainless-sop from 1.7.6 to 2.0.3

Release notes

Sourced from org.pgpainless:pgpainless-sop's releases.

PGPainless-CLI 2.0.3

PGPainless 2.0.3

This release bumps BC to 1.84 and fixes a major bug preventing certain OpenPGP operations if the key/certificate contained recent third-party signatures (#498).

PGPainless-CLI 2.0.2

No release notes provided.

PGPainless-CLI 2.0.1

No release notes provided.

PGPainless-CLI 2.0.0

PGPainless 2.0.0

PGPainless-CLI 1.7.7

PGPainless 1.7.7

Changelog

Sourced from org.pgpainless:pgpainless-sop's changelog.

2.0.3

  • Bump bcpg-jdk8on to 1.84
  • Bump bcprov-jdk18on to 1.84
  • Bump sop-java to 15.0.1
  • Bump logback-classic to 1.5.25
  • sop encrypt: For symmetric-key encryption; default to rfc4880 packet format
  • sop list-profiles encrypt: Add profile descriptions
  • sop generate-key: Do not add expiration date
  • sop encrypt:
    • Add support for --for={communications|storage|any} flag
    • Return exit code 17 for expired certs
  • sop update-key: Add encryption subkey if --signing-only is missing
  • Fix issue, where third-party certification is considered during encryption (#495)
  • Treat literal data packets with non-standard format octets as binary (#496)

2.0.2

  • Add PGPainless.asciiArmor(Collection<OpenPGPCertificate>, PacketFormat)
  • SigningOptions: Add missing @JvmOverloads annotations to addInlineSignature() and addDetachedSignature()
  • OpenPGPComponentKey: Add extension method getSecretKey()
  • OpenPGPKey: Add extension methods isFullyDecrypted(), isFullyEncrypted()
  • KeyRingBuilder: Properly respect custom key creation time on subkeys and signatures
  • WeakRSAKeyTest: Disable test if test vector key is expired at testing time
  • MessageMetadata: Add missing methods
    • isVerifiedInlineSignedBy(OpenPGPCertificate)
    • isVerifiedDetachedSignedBy(OpenPGPCertificate)
  • Bump sop-java to 14.0.3
  • Bump logback-core to 1.5.19
  • Fix exception when changing subkey passphrase on key with stripped primary key (thanks @​agrahn for reporting)

2.0.1

  • Fix subkey signatures on generate keys (#486, thanks to @​agrahn for reporting)

2.0.0

  • Add support for OpenPGP v6
  • PGPainless is no longer intended for singleton use
  • Internally make use of BCs new high-level API
  • Bump sop-java to 14.0.1
    • Implement new sop update-key command to refresh old keys to a usable state
    • Implement new sop merge-certs command to merge certificate copies
    • Implement new sop certify-userid command to certify third-party certificates
    • Implement new sop validate-userid command to validate userids on keys
    • sop generate-key: Add profile rfc9580-curve25519 for generating v6 keys over curve25519
    • sop generate-key: Add profile rfc9580-curve448 for generating v6 keys over curve448
    • sop encrypt: Add profile rfc9580 for v6-style symmetric message encryption

1.7.7

  • Bump bcpg-jdk8on to 1.82
  • Bump bcprov-jdk18on to 1.82
  • Fix handling of passphrases and user-ids containing leading/trailing whitespace
Commits
  • 27accc1 PGPainless 2.0.3
  • 52b3977 Update changelog
  • f763dba pgpainless-sop README: Update dependency version and sop spec revision
  • 1ef1ac6 BC 1.84 still chokes on hardware-secrets secret key
  • 5760945 Update changelog
  • b883188 Bump BC to 1.84
  • 5f9a288 Merge pull request #499 from pgpainless/thirdpartySigs
  • 5e31cfe Improve example code
  • 5700d3e Bump bc to 1.84-SNAPSHOT
  • 6d550fc Remove superfluous imports
  • Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `pgpainless` from 1.7.6 to 2.0.3.

Updates `org.pgpainless:pgpainless-core` from 1.7.6 to 2.0.3
- [Release notes](https://github.com/pgpainless/pgpainless/releases)
- [Changelog](https://github.com/pgpainless/pgpainless/blob/main/CHANGELOG.md)
- [Commits](pgpainless/pgpainless@1.7.6...2.0.3)

Updates `org.pgpainless:pgpainless-sop` from 1.7.6 to 2.0.3
- [Release notes](https://github.com/pgpainless/pgpainless/releases)
- [Changelog](https://github.com/pgpainless/pgpainless/blob/main/CHANGELOG.md)
- [Commits](pgpainless/pgpainless@1.7.6...2.0.3)

---
updated-dependencies:
- dependency-name: org.pgpainless:pgpainless-core
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
- dependency-name: org.pgpainless:pgpainless-sop
  dependency-version: 2.0.3
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Apr 16, 2026
@github-actions github-actions Bot merged commit 4b64a88 into main Apr 16, 2026
2 checks passed
@dependabot dependabot Bot deleted the dependabot/gradle/pgpainless-2.0.3 branch April 16, 2026 09:42
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants