From 561d9cedf72a1f7b93b749b9f29c12e55474a4ed Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Mon, 27 Jul 2026 10:29:33 +0000
Subject: [PATCH] Update org.bouncycastle to v1.85

---
 sigstore-java/build.gradle.kts         | 4 ++--
 sigstore-maven-plugin/build.gradle.kts | 2 +-
 2 files changed, 3 insertions(+), 3 deletions(-)

diff --git a/sigstore-java/build.gradle.kts b/sigstore-java/build.gradle.kts
index f074fd404..3fa36530a 100644
--- a/sigstore-java/build.gradle.kts
+++ b/sigstore-java/build.gradle.kts
@@ -35,8 +35,8 @@ dependencies {
     compileOnly("org.apache.tomcat:annotations-api:6.0.53") // java 9+ only
 
     implementation("com.google.code.gson:gson:2.14.0")
-    implementation("org.bouncycastle:bcutil-jdk18on:1.84")
-    implementation("org.bouncycastle:bcpkix-jdk18on:1.84")
+    implementation("org.bouncycastle:bcutil-jdk18on:1.85")
+    implementation("org.bouncycastle:bcpkix-jdk18on:1.85")
 
     implementation(platform("com.google.oauth-client:google-oauth-client-bom:1.39.0"))
     implementation("com.google.oauth-client:google-oauth-client")
diff --git a/sigstore-maven-plugin/build.gradle.kts b/sigstore-maven-plugin/build.gradle.kts
index 0e6a06d66..1a02c28da 100644
--- a/sigstore-maven-plugin/build.gradle.kts
+++ b/sigstore-maven-plugin/build.gradle.kts
@@ -14,7 +14,7 @@ dependencies {
     compileOnly("org.apache.maven.plugin-tools:maven-plugin-annotations:3.15.2")
 
     implementation(project(":sigstore-java"))
-    implementation("org.bouncycastle:bcutil-jdk18on:1.84")
+    implementation("org.bouncycastle:bcutil-jdk18on:1.85")
     implementation("org.apache.maven.plugins:maven-gpg-plugin:3.2.8")
 
     testImplementation("org.apache.maven.shared:maven-verifier:1.8.0")