[Improvement] [Alert] Outdated Bouncycastle dependency exposing your users to numerous security defects

[pjfanning]

Search before asking

• I had searched in the issues and found no similar issues.

What happened

The jdk15on jars for bouncycastle have been discontinued. The jdk18on jars will work as a replacement.

https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk18on lists 5 CVEs fixed since v1.71 and DS is still using 1.69

What you expected to happen

DS uses secure libs to protect your users

How to reproduce

n/a

Anything else

No response

Version

dev

Are you willing to submit PR?

• Yes I am willing to submit a PR!

Code of Conduct

• I agree to follow this project's Code of Conduct

[pjfanning]

• this appears to be a transitive dependency of com.qcloud:cos_api among others
• see 升级 bcprov 版本 tencentyun/cos-java-sdk-v5#176

[github-actions]

This issue has been automatically marked as stale because it has not had recent activity for 30 days. It will be closed in next 7 days if no further activity occurs.

[github-actions]

This issue has been closed because it has not received response for too long time. You could reopen it if you encountered similar problems in the future.