4.2.3
(chore): Bump Bouncy Castle jars bundled with the Gradle base image from 1.78.1 to
1.84 to address CVE-2026-3505 (unbounded PGP AEAD chunk size in bcpg leading
to pre-auth resource exhaustion).
(chore): Bump Bouncy Castle jars bundled with the Gradle base image from 1.78.1 to
1.84 to address CVE-2026-3505 (unbounded PGP AEAD chunk size in bcpg leading
to pre-auth resource exhaustion).