[dependabot]

Bumps org.c02e.jpgpj:jpgpj from 1.3 to 2.1.1.

Release notes

Sourced from org.c02e.jpgpj:jpgpj's releases.

JPGPJ 2.1.0

Added

• Public-key algorithm support for DSA, ECDSA, and Ed25519 (tags 22, 27, 28) signing and verification; ECDH/Cv25519 encryption subkeys.
• Test fixtures and round-trip tests for DSA, ECDSA, and Ed25519 keys; GnuPG interop golden files for decrypt/verify.
• README section on supported public-key algorithms, hash pairings, and FIPS caveats.
• PIT mutation testing via ./gradlew pitest (info.solidsoft.pitest 1.19.0, JUnit 5 plugin 1.2.2).
• TestEnvironmentListener so PIT's forked JVM matches the line.separator used by unit tests.
• OpenPGP modern encryption API: EncryptionProtection, AeadAlgorithm, AeadPacketStyle, PassphraseKeyDerivation, Argon2Parameters, OpenPgpProfile.
• HashingAlgorithm.SHA3_256 and SHA3_512 with explicit OpenPGP tag mapping via getOpenPgpTag().
• Encryptor.withModernDefaults() preset (AES256, AEAD-OCB v6, Argon2 S2K).
• EncryptionDetails metadata on FileMetadata after decryption (protection mode, cipher, AEAD, Argon2, detected profile).
• FileMetadata.Signature.getHashAlgorithm() populated during verification.

Changed

• HashingAlgorithm, EncryptionAlgorithm, and CompressionAlgorithm use explicit OpenPGP tags instead of enum.ordinal().
• JcaContextHelper configures SecureRandom on passphrase encryption generators (required for Argon2).

2.0.0

Breaking changes

• Java 17+ required. Java 8/11 support has been dropped.
• Bouncy Castle artifacts updated from jdk15on:1.70 to jdk18on:1.84.
• Groovy/Spock test stack removed; tests are now JUnit 5 only.

Added

• JcaContextHelper lazy provider resolution with FIPS provider auto-detection.
• System property jpgpj.security.provider for explicit provider class selection.
• Fail-fast when both standard and FIPS Bouncy Castle providers are on the classpath.
• GitHub Actions CI (Java 17 and 21).
• maven-publish and signing Gradle plugins (replaces legacy mavenCentral.gradle).

Changed

• SLF4J updated from 1.7.x to 2.0.17.
• Gradle updated from 4.10.2 to 8.12.1.
• bcprov-jdk18on and bcutil-jdk18on are now explicit dependencies.

Migration from 1.3

1. Upgrade your JVM to Java 17 or later.
2. Update Maven/Gradle dependencies to org.c02e.jpgpj:jpgpj:2.0.0.
3. Ensure Bouncy Castle jdk18on artifacts (1.84+) are on the classpath.
4. For FIPS deployments, replace standard BC jars with bc-fips, bcutil-fips, and bcpg-fips; call JcaContextHelper.setSecurityProvider(new BouncyCastleFipsProvider()) before any JPGPJ operation. Standard and FIPS BC jars must not coexist in the same JVM.

Changelog

Sourced from org.c02e.jpgpj:jpgpj's changelog.

2.1.1 - 2026-10-30

Changed

• Bouncy Castle artifacts updated from jdk15on:1.84 to jdk18on:1.86 & bc-fips:2.0.0 to bc-fips:2.0.2.

2.1.0 - 2026-06-20

Added

• Public-key algorithm support for DSA, ECDSA, and Ed25519 (tags 22, 27, 28) signing and verification; ECDH/Cv25519 encryption subkeys.
• Test fixtures and round-trip tests for DSA, ECDSA, and Ed25519 keys; GnuPG interop golden files for decrypt/verify.
• README section on supported public-key algorithms, hash pairings, and FIPS caveats.
• PIT mutation testing via ./gradlew pitest (info.solidsoft.pitest 1.19.0, JUnit 5 plugin 1.2.2).
• TestEnvironmentListener so PIT's forked JVM matches the line.separator used by unit tests.
• OpenPGP modern encryption API: EncryptionProtection, AeadAlgorithm, AeadPacketStyle, PassphraseKeyDerivation, Argon2Parameters, OpenPgpProfile.
• HashingAlgorithm.SHA3_256 and SHA3_512 with explicit OpenPGP tag mapping via getOpenPgpTag().
• Encryptor.withModernDefaults() preset (AES256, AEAD-OCB v6, Argon2 S2K).
• EncryptionDetails metadata on FileMetadata after decryption (protection mode, cipher, AEAD, Argon2, detected profile).
• FileMetadata.Signature.getHashAlgorithm() populated during verification.

Changed

• HashingAlgorithm, EncryptionAlgorithm, and CompressionAlgorithm use explicit OpenPGP tags instead of enum.ordinal().
• JcaContextHelper configures SecureRandom on passphrase encryption generators (required for Argon2).

2.0.0

Breaking changes

• Java 17+ required. Java 8/11 support has been dropped.
• Bouncy Castle artifacts updated from jdk15on:1.70 to jdk18on:1.84.
• Groovy/Spock test stack removed; tests are now JUnit 5 only.

Added

• JcaContextHelper lazy provider resolution with FIPS provider auto-detection.
• System property jpgpj.security.provider for explicit provider class selection.
• Fail-fast when both standard and FIPS Bouncy Castle providers are on the classpath.
• GitHub Actions CI (Java 17 and 21).
• maven-publish and signing Gradle plugins (replaces legacy mavenCentral.gradle).

Changed

• SLF4J updated from 1.7.x to 2.0.17.
• Gradle updated from 4.10.2 to 8.12.1.
• bcprov-jdk18on and bcutil-jdk18on are now explicit dependencies.

Commits

• 50bc375 Update version to 2.1.1 and upgrade Bouncy Castle dependencies to 1.86 and bc...
• 4a89320 Adjust publish task for manual publishing to maven
• c880a1e Added release notes from old versions to changelog
• 9aadee5 Created JPGPJ v2 (#43)
• See full diff in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

Looks like org.c02e.jpgpj:jpgpj is no longer being updated by Dependabot, so this is no longer needed.