Skip to content

chore: release 4.16.4 #1480

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
lukaszsocha2 merged 2 commits into from
Oct 3, 2025
Merged

chore: release 4.16.4 #1480

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
09da407
chore: release 4.16.4
box-sdk-build Oct 3, 2025
1767555
update readme with bumped version
lukaszsocha2 Oct 3, 2025
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions CHANGELOG.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -2,6 +2,13 @@

All notable changes to this project will be documented in this file. See [standard-version](https://github.com/conventional-changelog/standard-version) for commit guidelines.

### [4.16.4](https://github.com/box/box-java-sdk/compare/v4.16.3...v4.16.4) (2025-10-03)


### Bug Fixes:

* Bump Bouncy Castle to fix `CVE-2025-8916` ([#1454](https://github.com/box/box-java-sdk/issues/1454)) ([a3605f4](https://github.com/box/box-java-sdk/commit/a3605f47b4c5ee6b053f0940f9a06cba0a5c2584))

### [4.16.3](https://github.com/box/box-java-sdk/compare/v4.16.2...v4.16.3) (2025-07-23)


Expand Down
62 changes: 31 additions & 31 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -21,7 +21,7 @@ The Box Java SDK for interacting with the
[Box Content API](https://developers.box.com/docs/).

## Latest Release
Latest release can be found [here](https://github.com/box/box-java-sdk/tree/v4.16.3).
Latest release can be found [here](https://github.com/box/box-java-sdk/tree/v4.16.4).

## Upgrades
You can read about how to migrate to the 4 version [here](doc/upgrades/3.x.x%20to%204.x.x.md).
Expand Down Expand Up @@ -66,10 +66,10 @@ If you are developing application for Android visit our [Android guide](doc/andr
Maven: `com.eclipsesource.minimal-json:minimal-json:0.9.5`
2. [jose4j v0.9.4](https://bitbucket.org/b_c/jose4j/wiki/Home)
Maven: `org.bitbucket.b_c:jose4j:0.9.4`
3. [bouncycastle bcprov-jdk18on v1.78.1](https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk18on/1.78.1)
Maven: `org.bouncycastle:bcprov-jdk18on:1.78.1`
4. [bouncycastle bcpkix-jdk18on v1.78.1](https://mvnrepository.com/artifact/org.bouncycastle/bcpkix-jdk18on/1.78.1)
Maven: `org.bouncycastle:bcpkix-jdk18on:1.78.1`
3. [bouncycastle bcprov-jdk18on v1.82](https://mvnrepository.com/artifact/org.bouncycastle/bcprov-jdk18on/1.82)
Maven: `org.bouncycastle:bcprov-jdk18on:1.82`
4. [bouncycastle bcpkix-jdk18on v1.82](https://mvnrepository.com/artifact/org.bouncycastle/bcpkix-jdk18on/1.82)
Maven: `org.bouncycastle:bcpkix-jdk18on:1.82`
5. [Java Cryptography Extension (JCE) Unlimited Strength Jurisdiction Policy Files 7](http://www.oracle.com/technetwork/java/javase/downloads/jce-7-download-432124.html)
If you don't install this, you'll get an exception about key length or exception about parsing PKCS private key for Box Developer Edition. This is not a Box thing, this is a U.S. Government requirement concerning strong encryption.
The listed jar is for Oracle JRE. There might be other similar JARs for different JRE versions like the one below for IBM JDK
Expand Down Expand Up @@ -245,31 +245,31 @@ You can find guides and tutorials in the `doc` directory.

* [BUILD ON BOX PLATFORM](https://developer.box.com/guides/getting-started/)
* [Javadocs](http://box.github.io/box-java-sdk/javadoc/com/box/sdk/package-summary.html)
* [Overview](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/overview.md)
* [Configuration](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/configuration.md)
* [Logging](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/logging.md)
* [Authentication](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/authentication.md)
* [Files](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/files.md)
* [Folders](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/folders.md)
* [Comments](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/comments.md)
* [Collaborations](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/collaborations.md)
* [Collaboration Allowlists](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/collaboration_allowlists.md)
* [Events](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/events.md)
* [Search](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/search.md)
* [Users](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/users.md)
* [Groups](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/groups.md)
* [Tasks](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/tasks.md)
* [Trash](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/trash.md)
* [Collections](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/collections.md)
* [Devices](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/devices.md)
* [Retention Policies](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/retention_policies.md)
* [Legal Holds Policy](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/legal_holds.md)
* [Watermarking](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/watermarking.md)
* [Webhooks](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/webhooks.md)
* [Web Links](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/weblinks.md)
* [Metadata Templates](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/metadata_template.md)
* [Classifications](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/classifications.md)
* [Recent Items](https://github.com/box/box-java-sdk/blob/v4.16.3/doc/recent_items.md)
* [Overview](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/overview.md)
* [Configuration](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/configuration.md)
* [Logging](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/logging.md)
* [Authentication](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/authentication.md)
* [Files](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/files.md)
* [Folders](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/folders.md)
* [Comments](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/comments.md)
* [Collaborations](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/collaborations.md)
* [Collaboration Allowlists](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/collaboration_allowlists.md)
* [Events](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/events.md)
* [Search](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/search.md)
* [Users](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/users.md)
* [Groups](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/groups.md)
* [Tasks](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/tasks.md)
* [Trash](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/trash.md)
* [Collections](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/collections.md)
* [Devices](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/devices.md)
* [Retention Policies](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/retention_policies.md)
* [Legal Holds Policy](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/legal_holds.md)
* [Watermarking](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/watermarking.md)
* [Webhooks](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/webhooks.md)
* [Web Links](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/weblinks.md)
* [Metadata Templates](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/metadata_template.md)
* [Classifications](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/classifications.md)
* [Recent Items](https://github.com/box/box-java-sdk/blob/v4.16.4/doc/recent_items.md)


Javadocs are generated when `gradle javadoc` is run and can be found in
Expand All @@ -278,7 +278,7 @@ Javadocs are generated when `gradle javadoc` is run and can be found in
## FIPS 140-2 Compliance

To generate a Json Web Signature used for retrieving tokens in the JWT authentication method, the Box Java SDK decrypts an encrypted private key.
For this purpose, Box Java SDK uses libraries (`org.bouncycastle:bcpkix-jdk18on:1.77` and `org.bouncycastle:bcprov-jdk18on:1.77`)
For this purpose, Box Java SDK uses libraries (`org.bouncycastle:bcpkix-jdk18on:1.82` and `org.bouncycastle:bcprov-jdk18on:1.82`)
that are NOT compatible with FIPS 140-2 validated cryptographic library (`org.bouncycastle:bc-fips`).

There are two ways of ensuring that decryption operation is FIPS-compiant.
Expand Down
2 changes: 1 addition & 1 deletion build.gradle
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -14,7 +14,7 @@ sourceCompatibility = 1.8

group = "com.box"
archivesBaseName = "box-java-sdk"
version = "4.16.3"
version = "4.16.4"

java {
withJavadocJar()
Expand Down
2 changes: 1 addition & 1 deletion src/main/java/com/box/sdk/BoxAPIConnection.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -86,7 +86,7 @@ public class BoxAPIConnection {
private static final String BOX_NOTIFICATIONS_HEADER = "Box-Notifications";

private static final String JAVA_VERSION = System.getProperty("java.version");
private static final String SDK_VERSION = "4.16.3";
private static final String SDK_VERSION = "4.16.4";

/**
* The amount of buffer time, in milliseconds, to use when determining if an access token should be refreshed. For
Expand Down
Loading