AP-25728: Bump com.box:box-java-sdk component to 4.16.4

* Use "org.bouncycastle.[bcpkix|bcprov|bcutil]" from our target platform.

AP-25728 (Update com.box:box-java-sdk to 4.11.1)

Author: 3nol

org.knime.ext.box.filehandling/.classpath

@@ -1,10 +1,7 @@
 <?xml version="1.0" encoding="UTF-8"?>
 <classpath>
 	<classpathentry kind="src" path="src"/>
-	<classpathentry exported="true" kind="lib" path="libs/bcpkix-jdk18on-1.78.1.jar" sourcepath="libs/bcpkix-jdk18on-1.78.1-sources.jar"/>
-	<classpathentry exported="true" kind="lib" path="libs/bcprov-jdk18on-1.78.1.jar" sourcepath="libs/bcprov-jdk18on-1.78.1-sources.jar"/>
-	<classpathentry exported="true" kind="lib" path="libs/bcutil-jdk18on-1.78.1.jar" sourcepath="libs/bcutil-jdk18on-1.78.1-sources.jar"/>
-	<classpathentry exported="true" kind="lib" path="libs/box-java-sdk-4.10.0.jar" sourcepath="libs/box-java-sdk-4.10.0-sources.jar"/>
+	<classpathentry exported="true" kind="lib" path="libs/box-java-sdk-4.16.4.jar" sourcepath="libs/box-java-sdk-4.16.4-sources.jar"/>
 	<classpathentry exported="true" kind="lib" path="libs/jose4j-0.9.6.jar" sourcepath="libs/jose4j-0.9.6-sources.jar"/>
 	<classpathentry exported="true" kind="lib" path="libs/minimal-json-0.9.5.jar" sourcepath="libs/minimal-json-0.9.5-sources.jar"/>
 	<classpathentry kind="con" path="org.eclipse.jdt.launching.JRE_CONTAINER/org.eclipse.jdt.internal.debug.ui.launcher.StandardVMType/JavaSE-17">

org.knime.ext.box.filehandling/META-INF/MANIFEST.MF

@@ -10,13 +10,13 @@ Require-Bundle: org.knime.workbench.repository;bundle-version="[5.9.0,6.0.0)",
  com.squareup.okhttp3.okhttp;bundle-version="[4.0.0,5.0.0)",
  org.knime.credentials.base;bundle-version="[5.9.0,6.0.0)",
  org.knime.credentials.base.oauth;bundle-version="[5.10.0,6.0.0)",
- org.knime.core.ui;bundle-version="[5.10.0,6.0.0)"
+ org.knime.core.ui;bundle-version="[5.10.0,6.0.0)",
+ bcpkix;bundle-version="[1.80,2.0.0)",
+ bcprov;bundle-version="[1.80,2.0.0)",
+ bcutil;bundle-version="[1.80,2.0.0)"
 Bundle-ActivationPolicy: lazy
 Bundle-ClassPath: .,
- libs/bcpkix-jdk18on-1.78.1.jar,
- libs/bcprov-jdk18on-1.78.1.jar,
- libs/bcutil-jdk18on-1.78.1.jar,
- libs/box-java-sdk-4.10.0.jar,
+ libs/box-java-sdk-4.16.4.jar,
  libs/jose4j-0.9.6.jar,
  libs/minimal-json-0.9.5.jar
 Bundle-RequiredExecutionEnvironment: JavaSE-17

org.knime.ext.box.filehandling/build.properties

@@ -5,10 +5,7 @@ bin.includes = plugin.xml,\
                META-INF/,\
                .,\
                LICENSE.TXT,\
-               libs/bcpkix-jdk18on-1.78.1.jar,\
-               libs/bcprov-jdk18on-1.78.1.jar,\
-               libs/bcutil-jdk18on-1.78.1.jar,\
-               libs/box-java-sdk-4.10.0.jar,\
+               libs/box-java-sdk-4.16.4.jar,\
                libs/jose4j-0.9.6.jar,\
                libs/minimal-json-0.9.5.jar
 src.includes = LICENSE.TXT,\

org.knime.ext.box.filehandling/libraries_license/licenses.csv

@@ -1,6 +1,4 @@
 library,library-url,licence,,,,     licence-url,copyright
-bcpkix-jdk18on-1.78.1.jar,https://www.bouncycastle.org/java.html,MIT License,https://www.bouncycastle.org/licence.html,The Legion of the Bouncy Castle Inc.,,,
-bcprov-jdk18on-1.78.1.jar,https://www.bouncycastle.org/java.html,MIT License,https://www.bouncycastle.org/licence.html,The Legion of the Bouncy Castle Inc.,,,
-box-java-sdk-4.10.0.jar,https://github.com/box/box-java-sdk,Apache 2.0 License,https://github.com/box/box-java-sdk/blob/main/LICENSE,Box,Inc.,,
+box-java-sdk-4.16.4.jar,https://github.com/box/box-java-sdk,Apache 2.0 License,https://github.com/box/box-java-sdk/blob/main/LICENSE,Box,Inc.,,
 jose4j-0.9.6.jar,https://bitbucket.org/b_c/jose4j/wiki/Home,Apache 2.0 License,https://bitbucket.org/b_c/jose4j/src/master/LICENSE,Brian Campbell,,,
 minimal-json-0.9.5.jar,https://github.com/ralfstx/minimal-json,MIT License,https://github.com/ralfstx/minimal-json/blob/master/LICENSE,EclipseSource GmbH,,,

org.knime.ext.box.filehandling/libs/fetch_jars/pom.xml

@@ -37,7 +37,7 @@
 		<dependency>
 			<groupId>com.box</groupId>
 			<artifactId>box-java-sdk</artifactId>
-			<version>4.10.0</version>
+			<version>4.16.4</version>
 			<exclusions>
 				<exclusion>
 					<!-- Exclude old jose4j with CVEs (see AP-25728) -->
@@ -66,7 +66,7 @@
 						<configuration>
 							<includeScope>runtime</includeScope>
 							<outputDirectory>../</outputDirectory>
-							<excludeGroupIds>org.slf4j, com.squareup, org.jetbrains</excludeGroupIds>
+							<excludeGroupIds>org.slf4j, com.squareup, org.jetbrains, org.bouncycastle</excludeGroupIds>
 						</configuration>
 						<phase>package</phase>
 						<goals>
@@ -78,7 +78,7 @@
 						<configuration>
 							<includeScope>runtime</includeScope>
 							<outputDirectory>../</outputDirectory>
-							<excludeGroupIds>org.slf4j, com.squareup, org.jetbrains</excludeGroupIds>
+							<excludeGroupIds>org.slf4j, com.squareup, org.jetbrains, org.bouncycastle</excludeGroupIds>
 							<classifier>sources</classifier>
 						</configuration>
 						<phase>package</phase>