Merge pull request #3968 from riemannulus/bump/bouncycastle

🔧 Patch:  CVE-2024-29857 to `5.3-maintenance`

CHANGES.md

@@ -24,11 +24,16 @@ To be released.
 
  -  (Libplanet.Extensions.Cocona) Changed *System.Text.Json* from [6.0.7] to
     [6.0.*].  [[#3967]]
+ -  Changed *BouncyCastle.Cryptography* from
+    [2.0.0] to [2.4.0].  [[#3968]]
+ -  (Libplanet.Crypto) Changed *BouncyCastle.Cryptography* from
+    [2.0.0] to [2.4.0].  [[#3968]]
 
 ### CLI tools
 
 
 [#3967]: https://github.com/planetarium/libplanet/pull/3967
+[#3968]: https://github.com/planetarium/libplanet/pull/3968
 
 
 Version 5.3.0

src/Libplanet.Crypto/Libplanet.Crypto.csproj

@@ -4,7 +4,7 @@
     <PackageReference Include="System.Collections.Immutable" Version="1.*" />
     <PackageReference Include="System.Text.Json" Version="6.0.*" />
     <PackageReference Include="Bencodex" Version="0.16.0" />
-    <PackageReference Include="BouncyCastle.Cryptography" Version="2.0.0" />
+    <PackageReference Include="BouncyCastle.Cryptography" Version="2.4.0" />
   </ItemGroup>
 
   <ItemGroup Condition="'$(SkipSonar)' != 'true'">

src/Libplanet/Libplanet.csproj

@@ -22,7 +22,7 @@ https://docs.libplanet.io/</Description>
     <PackageReference Include="System.Diagnostics.DiagnosticSource" Version="8.0.0" />
     <PackageReference Include="System.Text.Json" Version="6.0.*" />
     <PackageReference Include="Bencodex" Version="0.16.0" />
-    <PackageReference Include="BouncyCastle.Cryptography" Version="2.0.0" />
+    <PackageReference Include="BouncyCastle.Cryptography" Version="2.4.0" />
     <PackageReference Include="Serilog" Version="2.8.0" />
     <PackageReference Include="Microsoft.Bcl.HashCode" Version="1.1.1" />
     <PackageReference Include="Norgerman.Cryptography.Scrypt" Version="2.0.1" />