Merge pull request #1257 from sigstore/renovate/org.bouncycastle

Update org.bouncycastle to v1.85

Author: loosebazooka

sigstore-java/build.gradle.kts

@@ -35,8 +35,8 @@ dependencies {
     compileOnly("org.apache.tomcat:annotations-api:6.0.53") // java 9+ only
 
     implementation("com.google.code.gson:gson:2.14.0")
-    implementation("org.bouncycastle:bcutil-jdk18on:1.84")
-    implementation("org.bouncycastle:bcpkix-jdk18on:1.84")
+    implementation("org.bouncycastle:bcutil-jdk18on:1.85")
+    implementation("org.bouncycastle:bcpkix-jdk18on:1.85")
 
     implementation(platform("com.google.oauth-client:google-oauth-client-bom:1.39.0"))
     implementation("com.google.oauth-client:google-oauth-client")

sigstore-java/src/test/java/dev/sigstore/timestamp/client/TimestampClientHttpTest.java

@@ -189,7 +189,7 @@ public void timestamp_failure_responseBodyReadError() throws Exception {
                 client.timestamp(tsReq);
               });
       assertEquals(
-          "Timestamp response validation or parsing failed: unknown tag 0 encountered",
+          "Timestamp response validation or parsing failed: corrupted stream - out of bounds length found: 105 > 101",
           tse.getMessage());
     }
   }

sigstore-maven-plugin/build.gradle.kts

@@ -14,7 +14,7 @@ dependencies {
     compileOnly("org.apache.maven.plugin-tools:maven-plugin-annotations:3.15.2")
 
     implementation(project(":sigstore-java"))
-    implementation("org.bouncycastle:bcutil-jdk18on:1.84")
+    implementation("org.bouncycastle:bcutil-jdk18on:1.85")
     implementation("org.apache.maven.plugins:maven-gpg-plugin:3.2.8")
 
     testImplementation("org.apache.maven.shared:maven-verifier:1.8.0")