diff options
| author | David Ostrovsky <david@ostrovsky.org> | 2018-12-27 21:34:08 +0100 |
|---|---|---|
| committer | David Pursehouse <dpursehouse@collab.net> | 2019-01-11 08:35:32 +0900 |
| commit | 0b61aa0aa19afe84b83766572cda46f6cb529dd8 (patch) | |
| tree | 15ae7c7df7b876eeb3310eb6485368400843d29d | |
| parent | a9c456548354fd99f6f5d9934f90800e5b117adb (diff) | |
Upgrade JGit to 4.7.7.201812240805-r
This release fixes an issue where AdvertiseRefsHook was not called for
git-upload-pack in protocol v0 bidirectional transports, meaning that
wants aren't validated and a user can fetch anything that is pointed
to by any ref (using fetch-by-sha1), as long as they can guess the
object name.
Bug: Issue 10262
Change-Id: I8b81336acffc655f8d768ba84c8b95a086397b32
| -rw-r--r-- | lib/jgit/jgit.bzl | 16 |
1 files changed, 8 insertions, 8 deletions
diff --git a/lib/jgit/jgit.bzl b/lib/jgit/jgit.bzl index 1b7e652fe4..e010710a7c 100644 --- a/lib/jgit/jgit.bzl +++ b/lib/jgit/jgit.bzl @@ -1,12 +1,12 @@ -load("//tools/bzl:maven_jar.bzl", "MAVEN_CENTRAL", "maven_jar") +load("//tools/bzl:maven_jar.bzl", "ECLIPSE", "maven_jar") -_JGIT_VERS = "4.7.6.201810191618-r" +_JGIT_VERS = "4.7.7.201812240805-r" _DOC_VERS = _JGIT_VERS # Set to _JGIT_VERS unless using a snapshot JGIT_DOC_URL = "http://download.eclipse.org/jgit/site/" + _DOC_VERS + "/apidocs" -_JGIT_REPO = MAVEN_CENTRAL # Leave here even if set to MAVEN_CENTRAL. +_JGIT_REPO = ECLIPSE # Leave here even if set to MAVEN_CENTRAL. # set this to use a local version. # "/home/<user>/projects/jgit" @@ -35,28 +35,28 @@ def jgit_maven_repos(): name = "jgit-lib", artifact = "org.eclipse.jgit:org.eclipse.jgit:" + _JGIT_VERS, repository = _JGIT_REPO, - sha1 = "e65c01d8f3a30a413b613f1fa5f770bfa8b62c81", - src_sha1 = "c837b9e774573afcb8a80ee318c2fbf1a3f29dd2", + sha1 = "d2358e838084d2482d51b51b70fd34a356495925", + src_sha1 = "29471dec1313292c0b97a9b89bc3009802145497", unsign = True, ) maven_jar( name = "jgit-servlet", artifact = "org.eclipse.jgit:org.eclipse.jgit.http.server:" + _JGIT_VERS, repository = _JGIT_REPO, - sha1 = "e55ba5476474939aaf74c76f3aa9f377391ee043", + sha1 = "ed85179e4fd6aabadf00db035578dd0888c68228", unsign = True, ) maven_jar( name = "jgit-archive", artifact = "org.eclipse.jgit:org.eclipse.jgit.archive:" + _JGIT_VERS, repository = _JGIT_REPO, - sha1 = "6d873357c44f217f59f52a70cd91fa30bd80e79a", + sha1 = "83820dc9253d6e1450742cbea9f7de265caf2a89", ) maven_jar( name = "jgit-junit", artifact = "org.eclipse.jgit:org.eclipse.jgit.junit:" + _JGIT_VERS, repository = _JGIT_REPO, - sha1 = "50932594f877a56f88d2a5ab4b19198a4dfd495a", + sha1 = "3275d89afdad003b03a055a8a2b838cc512cd2fc", unsign = True, ) |