Skip to content

Changes

Summary

  1. Target platform: align with JGit (details)
  2. [Orbit] Update lucene feature to 4.31.0.v20240130-0800 (details)
  3. External GPG signature verification (details)
Commit 4e21de21da38c4d53dfda5fe7c093ec2b256fa69 by Thomas Wolf
Target platform: align with JGit

* JNA 5.13.0 -> 5.14.0
* Apache MINA sshd 2.11.0 -> 2.12.0

Change-Id: I1b81d89235e5ecd849656ab94fca8983f8b6dc3a
Signed-off-by: Thomas Wolf <twolf@apache.org>
The file was modified org.eclipse.egit.target/egit-4.29.target
The file was modified org.eclipse.egit.target/maven/dependencies.tpd
The file was modified org.eclipse.egit.target/egit-4.27.target
The file was modified org.eclipse.egit.target/egit-4.26.target
The file was modified org.eclipse.egit.target/egit-4.31.target
The file was modified org.eclipse.egit.target/egit-4.28.target
The file was modified org.eclipse.egit.target/egit-4.30.target
Commit f8c681c8b5c085870c7ddbc63d02eb37d648237e by Matthias Sohn
[Orbit] Update lucene feature to 4.31.0.v20240130-0800

Change-Id: I3e8ba4a4d3853e172cea2aca717f1a68c9f83208
The file was modified org.eclipse.egit.target/egit-4.30.target
The file was modified org.eclipse.egit.target/egit-4.27.target
The file was modified org.eclipse.egit.target/egit-4.28.target
The file was modified org.eclipse.egit.target/orbit/orbit-4.31.tpd
The file was modified org.eclipse.egit.target/egit-4.26.target
The file was modified org.eclipse.egit.target/egit-4.29.target
The file was modified org.eclipse.egit.target/egit-4.31.target
Commit 61ae31f74f973b7883e2e374d205fdea073e3143 by Matthias Sohn
External GPG signature verification

If an external GPG is used for signing also use the external GPG for
signature verification.

In the signer use Bouncy Castle only to verify that the result we get
from the external program is indeed a correctly formatted signature, but
don't verify the signature. Previously we tried to fully verify the
signature, but for some GPG setups, the JGit implementation cannot find
the public key. For instance when GPG uses the keyboxd daemon (as
Gpg4Win does since version 4.2.0), it stores public keys in an sqlite
database.

Bug: egit-12
JGit-Dependency: I9cf093caa9fdebede801d665f2591cd9b275e1fd
Change-Id: I371b47b4d909635485f2a34e3bae8b104d831399
The file was addedorg.eclipse.egit.core/src/org/eclipse/egit/core/internal/signing/ExternalGpgSignatureVerifier.java
The file was modified org.eclipse.egit.core/src/org/eclipse/egit/core/internal/coretext.properties
The file was modified org.eclipse.egit.core/src/org/eclipse/egit/core/internal/signing/GpgSetup.java
The file was modified org.eclipse.egit.core/META-INF/MANIFEST.MF
The file was addedorg.eclipse.egit.core/src/org/eclipse/egit/core/internal/signing/ExternalGpgSignatureVerifierFactory.java
The file was addedorg.eclipse.egit.core/src/org/eclipse/egit/core/internal/signing/ExternalProcessRunner.java
The file was modified org.eclipse.egit.ui/src/org/eclipse/egit/ui/internal/preferences/CommittingPreferencePage.java
The file was modified org.eclipse.egit.core/src/org/eclipse/egit/core/internal/CoreText.java
The file was addedorg.eclipse.egit.core/src/org/eclipse/egit/core/internal/signing/ExternalGpg.java
The file was modified org.eclipse.egit.core/src/org/eclipse/egit/core/internal/signing/ExternalGpgSigner.java