Skip to content

Bump com.github.mwiede:jsch from 2.28.7 to 2.28.8 - #1003

Merged
slachiewicz merged 1 commit into
wagon-3.xfrom
dependabot/maven/wagon-3.x/com.github.mwiede-jsch-2.28.8
Oct 19, 2026
Merged

slachiewicz merged 1 commit into
wagon-3.xfrom
dependabot/maven/wagon-3.x/com.github.mwiede-jsch-2.28.8

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 14, 2026

Copy link
Copy Markdown
Contributor

Bumps com.github.mwiede:jsch from 2.28.7 to 2.28.8.

Release notes

Sourced from com.github.mwiede:jsch's releases.

jsch-2.28.8

What's Changed

  • 2.28.8 changes by @​norrisjeremy in mwiede/jsch#1134
    • #1133: bounds check incoming SSH_FXP_DATA responses.
    • #1133: cap length of incoming HTTP status response lines.
    • #1127: expand on previous SftpATTRS bounds checks to properly close SSH_FX_READDIR handles.
    • #1139: add bounds checks when parsing prompts from SSH_MSG_USERAUTH_INFO_REQUEST messages.
    • #1127 & #1139: expand upon previous bounds checks to account for arithmetic overflow.
  • Support wildcard host certificate principals by @​tc-tlv in mwiede/jsch#1108
  • Expose local SFTP window/packet size setters as public by @​courville in mwiede/jsch#1145

Dependency Updates

New Contributors

Full Changelog: mwiede/jsch@jsch-2.28.7...jsch-2.28.8

Commits
  • 36c4d26 [maven-release-plugin] prepare release jsch-2.28.8
  • cd4e924 chore: downgrade maven version after publishing problems
  • 53f016a Expose local SFTP window/packet size setters as public (#1145)
  • 898c6c2 Run tests on Java 27.
  • cc7e534 Update to Maven 3.10.0.
  • 660f42d Follow OpenSSH behavior and restrict maximum number of KDF rounds.
  • 9b13e61 Follow OpenSSH behavior and use Huffman coding for zlib compression.
  • 780e57e #1127 & #1139: expand upon previous bounds checks to account for arithmetic o...
  • f94e745 #1139: add bounds checks when parsing prompts from SSH_MSG_USERAUTH_INFO_REQU...
  • d2a3658 #1127: expand on previous SftpATTRS bounds checks to properly close SSH_FX_RE...
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.github.mwiede:jsch](https://github.com/mwiede/jsch) from 2.28.7 to 2.28.8.
- [Release notes](https://github.com/mwiede/jsch/releases)
- [Changelog](https://github.com/mwiede/jsch/blob/master/ChangeLog)
- [Commits](mwiede/jsch@jsch-2.28.7...jsch-2.28.8)

---
updated-dependencies:
- dependency-name: com.github.mwiede:jsch
  dependency-version: 2.28.8
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code mvn3 labels Oct 14, 2026
@slachiewicz
slachiewicz merged commit 309b999 into wagon-3.x Oct 19, 2026
14 of 20 checks passed
@slachiewicz
slachiewicz deleted the dependabot/maven/wagon-3.x/com.github.mwiede-jsch-2.28.8 branch October 19, 2026 00:01
@github-actions github-actions Bot added this to the 3.5.4 milestone Oct 19, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code mvn3

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant