Skip to content

Bump com.github.mwiede:jsch from 2.28.7 to 2.28.8 - #1002

Merged
Bukama merged 1 commit into
masterfrom
dependabot/maven/com.github.mwiede-jsch-2.28.8
Oct 18, 2026
Merged

Bukama merged 1 commit into
masterfrom
dependabot/maven/com.github.mwiede-jsch-2.28.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps com.github.mwiede:jsch from 2.28.7 to 2.28.8.

Release notes

Sourced from com.github.mwiede:jsch's releases.

jsch-2.28.8

What's Changed

  • 2.28.8 changes by @​norrisjeremy in mwiede/jsch#1134
    • #1133: bounds check incoming SSH_FXP_DATA responses.
    • #1133: cap length of incoming HTTP status response lines.
    • #1127: expand on previous SftpATTRS bounds checks to properly close SSH_FX_READDIR handles.
    • #1139: add bounds checks when parsing prompts from SSH_MSG_USERAUTH_INFO_REQUEST messages.
    • #1127 & #1139: expand upon previous bounds checks to account for arithmetic overflow.
  • Support wildcard host certificate principals by @​tc-tlv in mwiede/jsch#1108
  • Expose local SFTP window/packet size setters as public by @​courville in mwiede/jsch#1145

Dependency Updates

New Contributors

Full Changelog: mwiede/jsch@jsch-2.28.7...jsch-2.28.8

Commits
  • 36c4d26 [maven-release-plugin] prepare release jsch-2.28.8
  • cd4e924 chore: downgrade maven version after publishing problems
  • 53f016a Expose local SFTP window/packet size setters as public (#1145)
  • 898c6c2 Run tests on Java 27.
  • cc7e534 Update to Maven 3.10.0.
  • 660f42d Follow OpenSSH behavior and restrict maximum number of KDF rounds.
  • 9b13e61 Follow OpenSSH behavior and use Huffman coding for zlib compression.
  • 780e57e #1127 & #1139: expand upon previous bounds checks to account for arithmetic o...
  • f94e745 #1139: add bounds checks when parsing prompts from SSH_MSG_USERAUTH_INFO_REQU...
  • d2a3658 #1127: expand on previous SftpATTRS bounds checks to properly close SSH_FX_RE...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.github.mwiede:jsch](https://github.com/mwiede/jsch) from 2.28.7 to 2.28.8.
- [Release notes](https://github.com/mwiede/jsch/releases)
- [Changelog](https://github.com/mwiede/jsch/blob/master/ChangeLog)
- [Commits](mwiede/jsch@jsch-2.28.7...jsch-2.28.8)

---
updated-dependencies:
- dependency-name: com.github.mwiede:jsch
  dependency-version: 2.28.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Oct 14, 2026
@Bukama Bukama self-assigned this Oct 18, 2026
@Bukama
Bukama merged commit 481d161 into master Oct 18, 2026
15 checks passed
@Bukama
Bukama deleted the dependabot/maven/com.github.mwiede-jsch-2.28.8 branch October 18, 2026 05:44
@github-actions github-actions Bot added this to the 4.0.0-M1 milestone Oct 18, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant