Merge branch 'release/1.6.1'

Author: infeo

.github/dependabot.yml

@@ -10,31 +10,12 @@ updates:
     ignore:
       - dependency-name: "org.apache.maven.plugins:maven-surefire-plugin"
         versions: [ "3.5.4" ] # incompatible with junit-tree reporter
+      - dependency-name: "com.fasterxml.jackson.*"
+        versions: [ "[2.22,)" ] # 2.21.x is LTS, see https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.21
     groups:
-      java-test-dependencies:
-        patterns:
-          - "org.junit.jupiter:*"
-          - "org.mockito:*"
-      maven-build-plugins:
-        patterns:
-          - "org.apache.maven.plugins:*"
-          - "org.owasp:dependency-check-maven"
-          - "org.sonatype.central:central-publishing-maven-plugin"
-          - "me.fabriciorby:maven-surefire-junit5-tree-reporter"
-          - "org.codehaus.mojo:exec-maven-plugin"
-          - "io.github.coffeelibs:jextract-maven-plugin"
-      java-production-dependencies:
+      java-dependencies:
         patterns:
           - "*"
-        exclude-patterns:
-          - "org.junit.jupiter:*"
-          - "org.mockito:*"
-          - "org.apache.maven.plugins:*"
-          - "org.owasp:dependency-check-maven"
-          - "org.sonatype.central:central-publishing-maven-plugin"
-          - "me.fabriciorby:maven-surefire-junit5-tree-reporter"
-          - "org.codehaus.mojo:exec-maven-plugin"
-          - "io.github.coffeelibs:jextract-maven-plugin"
   - package-ecosystem: "github-actions"
     directory: "/" # even for `.github/workflows`
     schedule:

.github/workflows/build.yml

@@ -1,8 +1,7 @@
 name: Build
 on:
   push:
-  pull_request_target:
-    types: [labeled]
+  pull_request:
 
 env:
   JAVA_VERSION: 25
@@ -14,18 +13,18 @@ defaults:
 jobs:
   build:
     name: Build and Test
-    runs-on: windows-latest
+    runs-on: windows-2022
     permissions:
       contents: read
       id-token: write # OIDC token for the attestations step
       attestations: write # Required for the attestations step
     outputs:
       sha256: ${{ steps.checksums.outputs.sha256 }}
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
         with:
           fetch-depth: 0 # deep fetch for better sonarcloud analysis
-      - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+      - uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
         with:
           distribution: 'temurin'
           java-version: ${{ env.JAVA_VERSION }}
@@ -37,7 +36,7 @@ jobs:
         run: ./mvnw -B test --no-transfer-progress -DdevCommandFileDir="${{ vars.MSVC_DEV_FILES_DIR }}"
       - name: Sign DLLs with Azure Trusted Signing
         if: startsWith(github.ref, 'refs/tags/')
-        uses: azure/artifact-signing-action@db7a3a6bd3912025c705162fb7475389f5b69ec6 # v1.0.0
+        uses: azure/artifact-signing-action@c7ab2a863ab5f9a846ddb8265964877ef296ee82 # v2.0.0
         with:
           files: |
             ${{ github.workspace }}\src\main\resources\integrations-x64.dll
@@ -79,27 +78,27 @@ jobs:
           "@ | Out-File -FilePath $env:GITHUB_OUTPUT -Encoding utf8 -Append
       - name: Attest
         if: startsWith(github.ref, 'refs/tags/')
-        uses: actions/attest-build-provenance@96278af6caaf10aea03fd8d33a09a777ca52d62f # v3.2.0
+        uses: actions/attest-build-provenance@a2bbfa25375fe432b6a289bc6b6cd05ecd0c4c32 # v4.1.0
         with:
           subject-path: |
             target/*.jar
             target/*.pom
-      - uses: actions/upload-artifact@b7c566a772e6b6bfb58ed0dc250532a479d7789f # v6.0.0
+      - uses: actions/upload-artifact@043fb46d1a93c77aae656e7c1c64a875d1fc6a0a # v7.0.1
         with:
           name: artifacts
           path: target/*.jar
 
   deploy-central:
     name: Deploy to Maven Central
-    runs-on: windows-latest
+    runs-on: windows-2022
     permissions:
       id-token: write # OIDC token for sigstore signing
       contents: read # Required for sigstore signing
     needs: [build]
     if: github.repository_owner == 'cryptomator' && (startsWith(github.ref, 'refs/tags/') || contains(github.event.head_commit.message, '[deploy]'))
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
         with:
           distribution: 'temurin'
           java-version: ${{ env.JAVA_VERSION }}
@@ -116,10 +115,10 @@ jobs:
           PROJECT_VERSION=$(./mvnw help:evaluate "-Dexpression=project.version" -q -DforceStdout)
           test "${PROJECT_VERSION: -9}" = "-SNAPSHOT"
       - name: Download JAR with signed DLLs
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: artifacts
-      - name: Extract DLLs from JAR
+      - name: Extract singed DLLs from JAR into src dir, skipping native compile
         run: |
           JAR_PATH=$(ls ./*.jar | grep -v -E '(-sources|-javadoc)\.jar$' | head -n1)
           jar --extract --file="$JAR_PATH" --dir ./src/main/resources integrations-x64.dll integrations-arm64.dll
@@ -134,16 +133,16 @@ jobs:
 
   deploy-github:
     name: Deploy to GitHub Packages
-    runs-on: windows-latest
+    runs-on: windows-2022
     permissions:
       packages: write # Required for the deploy to GitHub Packages step
       id-token: write # OIDC token for sigstore signing
       contents: read # Required for sigstore signing
     needs: [build]
     if: github.repository_owner == 'cryptomator' && (startsWith(github.ref, 'refs/tags/') || contains(github.event.head_commit.message, '[deploy]'))
     steps:
-      - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
-      - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+      - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
+      - uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
         with:
           java-version: ${{ env.JAVA_VERSION }}
           distribution: 'temurin'
@@ -157,10 +156,10 @@ jobs:
           PROJECT_VERSION=$(./mvnw help:evaluate "-Dexpression=project.version" -q -DforceStdout)
           test "${PROJECT_VERSION: -9}" = "-SNAPSHOT"
       - name: Download JAR with signed DLLs
-        uses: actions/download-artifact@37930b1c2abaa49bbe596cd826c3c89aef350131 # v7.0.0
+        uses: actions/download-artifact@3e5f45b2cfb9172054b4087a40e8e0b5a5461e7c # v8.0.1
         with:
           name: artifacts
-      - name: Extract DLLs from JAR
+      - name: Extract singed DLLs from JAR into src dir, skipping native compile
         run: |
           JAR_PATH=$(ls ./*.jar | grep -v -E '(-sources|-javadoc)\.jar$' | head -n1)
           jar --extract --file="$JAR_PATH" --dir ./src/main/resources integrations-x64.dll integrations-arm64.dll
@@ -181,7 +180,7 @@ jobs:
     if: startsWith(github.ref, 'refs/tags/')
     steps:
       - name: Create Release
-        uses: softprops/action-gh-release@a06a81a03ee405af7f2048a818ed3f03bbf83c7b # v2.5.0
+        uses: softprops/action-gh-release@718ea10b132b3b2eba29c1007bb80653f286566b # v3.0.1
         with:
           prerelease: true
           token: ${{ secrets.CRYPTOBOT_RELEASE_TOKEN }}

.github/workflows/codeql-analysis.yml

@@ -20,22 +20,22 @@ env:
 jobs:
   analyse:
     name: Analyse
-    runs-on: windows-latest
+    runs-on: windows-2022
     if: ${{ !(github.actor == 'dependabot[bot]' && contains(fromJSON('["push"]'), github.event_name)) }}
     steps:
-    - uses: actions/checkout@de0fac2e4500dabe0009e67214ff5f5447ce83dd # v6.0.2
+    - uses: actions/checkout@9c091bb21b7c1c1d1991bb908d89e4e9dddfe3e0 # v7.0.0
       with:
         fetch-depth: 2
-    - uses: actions/setup-java@be666c2fcd27ec809703dec50e508c2fdc7f6654 # v5.2.0
+    - uses: actions/setup-java@ad2b38190b15e4d6bdf0c97fb4fca8412226d287 # v5.3.0
       with:
         distribution: 'temurin'
         java-version: ${{ env.JAVA_VERSION }}
         cache: 'maven'
     - name: Initialize CodeQL
-      uses: github/codeql-action/init@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1
+      uses: github/codeql-action/init@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2
       with:
         languages: java
     - name: Build
       run: ./mvnw -B compile -DskipTests -DdevCommandFileDir="${{ env.MSVC_DEV_FILES_DIR }}"
     - name: Perform CodeQL Analysis
-      uses: github/codeql-action/analyze@6bc82e05fd0ea64601dd4b465378bbcf57de0314 # v4.32.1
+      uses: github/codeql-action/analyze@8aad20d150bbac5944a9f9d289da16a4b0d87c1e # v4.36.2

.github/workflows/dependency-check.yml

@@ -10,9 +10,9 @@ on:
 
 jobs:
   check-dependencies:
-    uses: skymatic/workflows/.github/workflows/run-dependency-check.yml@957d3c2c08c56855fdac41e5afb9a7aca8c30dd9 # v3.0.3
+    uses: skymatic/workflows/.github/workflows/run-dependency-check.yml@8356563bf7b8d1c8d693f75ca487e8f57573cec9 # v3.1.0
     with:
-      runner-os: 'windows-latest'
+      runner-os: 'windows-2022'
       java-distribution: 'temurin'
       java-version: 25
     secrets:

CHANGELOG.md

@@ -7,6 +7,14 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.1.0/).
 The changelog starts with version 1.5.1.
 Changes to prior versions can be found on the [GitHub release page](https://github.com/cryptomator/integrations-win/releases).
 
+## [1.6.1](https://github.com/cryptomator/integrations-win/releases/1.6.1) - 2026-06-22
+### Changed
+* Update dependencies
+  - `org.cryptomator:integrations-api` from 1.7.0 to 1.9.0
+  - `com.fasterxml.jackson.core:jackson-databind` from 2.21.0 to 2.21.4
+  - `org.slf4j:slf4j-*` from 2.0.17 to 2.0.18
+
+
 ## [1.6.0](https://github.com/cryptomator/integrations-win/releases/1.6.0) - 2026-02-17
 ### Added
 * Maven wrapper ([#131](https://github.com/cryptomator/integrations-win/pull/131))

pom.xml

@@ -5,7 +5,7 @@
 	<modelVersion>4.0.0</modelVersion>
 	<groupId>org.cryptomator</groupId>
 	<artifactId>integrations-win</artifactId>
-	<version>1.6.0</version>
+	<version>1.6.1</version>
 
 	<name>Cryptomator Integrations for Windows</name>
 	<description>Provides optional Windows services used by Cryptomator</description>
@@ -37,30 +37,30 @@
 		<project.jdk.version>25</project.jdk.version>
 
 		<!-- runtime dependencies -->
-		<api.version>1.7.0</api.version>
-		<slf4j.version>2.0.17</slf4j.version>
-		<jackson.version>2.21.0</jackson.version>
+		<api.version>1.9.0</api.version>
+		<slf4j.version>2.0.18</slf4j.version>
+		<jackson.version>2.21.4</jackson.version>
 		<jackson-annotations.version>2.21</jackson-annotations.version>
 
 		<!-- test dependencies -->
-		<junit.jupiter.version>6.0.2</junit.jupiter.version>
-		<mockito.version>5.21.0</mockito.version>
+		<junit.jupiter.version>6.1.0</junit.jupiter.version>
+		<mockito.version>5.23.0</mockito.version>
 
 		<!-- build plugin dependencies -->
 		<mvn-clean.version>3.5.0</mvn-clean.version>
 		<mvn-compiler.version>3.15.0</mvn-compiler.version>
-		<mvn-dependency.version>3.9.0</mvn-dependency.version>
+		<mvn-dependency.version>3.11.0</mvn-dependency.version>
 		<mvn-deploy.version>3.1.4</mvn-deploy.version>
-		<mvn-enforcer.version>3.6.2</mvn-enforcer.version>
-		<mvn-failsafe.version>3.5.4</mvn-failsafe.version>
+		<mvn-enforcer.version>3.6.3</mvn-enforcer.version>
+		<mvn-failsafe.version>3.5.6</mvn-failsafe.version>
 		<mvn-javadoc.version>3.12.0</mvn-javadoc.version>
 		<mvn-gpg.version>3.2.8</mvn-gpg.version>
-		<mvn-resources.version>3.4.0</mvn-resources.version>
+		<mvn-resources.version>3.5.0</mvn-resources.version>
 		<mvn-source.version>3.4.0</mvn-source.version>
-		<mvn-surefire.version>3.5.3</mvn-surefire.version> <!-- Update blocked by https://github.com/fabriciorby/maven-surefire-junit5-tree-reporter/issues/68 . Check also dependabot file  -->
+		<mvn-surefire.version>3.5.6</mvn-surefire.version> <!-- Update blocked by https://github.com/fabriciorby/maven-surefire-junit5-tree-reporter/issues/68 . Check also dependabot file  -->
 		<exec-maven.version>3.6.3</exec-maven.version>
-		<dependency-check.version>12.2.0</dependency-check.version>
-		<central-publishing.version>0.10.0</central-publishing.version>
+		<dependency-check.version>12.2.2</dependency-check.version>
+		<central-publishing.version>0.11.0</central-publishing.version>
 		<jextract-maven.version>0.4.4</jextract-maven.version>
 		<junit-tree-reporter.version>1.5.1</junit-tree-reporter.version>
 

src/main/resources/WinIntegrationsBundle_hu.properties

@@ -1 +1,2 @@
-org.cryptomator.windows.keychain.displayName=Windows adatvédelem
+org.cryptomator.windows.keychain.displayName=Windows adatvédelem
+org.cryptomator.windows.keychain.displayWindowsHelloName=Windows Hello

src/main/resources/WinIntegrationsBundle_lt.properties

@@ -1 +1,2 @@
-org.cryptomator.windows.keychain.displayName=Windows 數據保護
+org.cryptomator.windows.keychain.displayName=Windows 數據保護
+org.cryptomator.windows.keychain.displayWindowsHelloName=Windows Hello

src/main/resources/WinIntegrationsBundle_zh_HK.properties

@@ -1,2 +1,2 @@
-org.cryptomator.windows.keychain.displayName=Windows 數據保護
+org.cryptomator.windows.keychain.displayName=Windows 資料保護
 org.cryptomator.windows.keychain.displayWindowsHelloName=Windows Hello