Bump com.password4j:password4j from 1.7.0 to 1.8.2

[dependabot]

Bumps com.password4j:password4j from 1.7.0 to 1.8.2.

Release notes

Sourced from com.password4j:password4j's releases.

1.8.2

Fixed

• Multi thread algorithms use daemon threads in order to not block the application shutdown if there is no explicit System.exit() (#151)
• Password4j works even when there is no access to psw4j.properties file due to restrictive security policies (#153)

1.8.1

Fixed

• Argon2Function#internalHash(...) used a double conversion from byte[] to String and back to byte[] that created inconsistencies in `Hash#salt (https://github.com/Password4j/password4j/blob/HEAD/issues/143))

Changed

• Hash#Hash(HashingFunction, String, byte[], String) marked deprecated

1.8.0

Added

• Balloon Hashing implementation (#131)

Fixed

• Parallelism is achieved by an ExecutorService instantiated during object creation instead of during the hashing process

Changed

• Banner is disabled by default

1.7.3

Fixed

• Wrong hashes when the password contains non ISO 8859-1 characters (#126)

1.7.2

Fixed

• Suppressed warning for usage of java.security.AccessController. This is how the java development team fixed the problem for the moment (#119)
• In some custom JDK implementations java.security.Provider#getServices() can return null instead of empty java.security.Provider.Service[] (https://github.com/Password4j/password4j/blob/HEAD/issues/120))

1.7.1

Fixed

• Bcrypt used negative rounds when cost factor = 31 (#114)

Changelog

Sourced from com.password4j:password4j's changelog.

1.8.2 - (2024-05-01)

Fixed

• Multi thread algorithms use daemon threads in order to not block the application shutdown if there is no explicit System.exit() (#151)
• Password4j works even when there is no access to psw4j.properties file due to restrictive security policies (#153)

1.8.1 - (2024-03-08)

Fixed

• Argon2Function#internalHash(...) used a double conversion from byte[] to String and back to byte[] that created inconsistencies in `Hash#salt (https://github.com/Password4j/password4j/blob/master/issues/143))

Changed

• Hash#Hash(HashingFunction, String, byte[], String) marked deprecated

1.8.0 - (2024-03-03)

Added

• Balloon Hashing implementation (#131)

Fixed

• Parallelism is achieved by an ExecutorService instantiated during object creation instead of during the hashing process

Changed

• Banner is disabled by default

1.7.3 - (2023-09-14)

Fixed

• Wrong hashes when the password contains non ISO 8859-1 characters (#126)

1.7.2 - (2023-08-20)

Fixed

• Suppressed warning for usage of java.security.AccessController. This is how the java development team fixed the problem for the moment (#119)
• In some custom JDK implementations java.security.Provider#getServices() can return null instead of empty java.security.Provider.Service[] (https://github.com/Password4j/password4j/blob/master/issues/120))

1.7.1 - (2023-06-02)

Fixed

• Bcrypt used negative rounds when cost factor = 31 (#114)

Commits

• f479a76 preparing 1.8.2
• bcdeb53 added thread group back
• f80271d Merge branch 'master' of github.com:Password4j/password4j
• 7041635 little performance fixes
• 69ff99e Merge pull request #154 from terryquigleysas/additional_exception_handling
• f60d2e4 removed thread groups
• f7e3cea Additional Exception Handling for Restricted Environments
• c21a064 Merge pull request #151 from phinner/fix/blocking-threads
• 65c697d fix: Fix argon and balloon blocking application shutdown
• 462cf46 preparing 1.8.1
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot merge will merge this PR after your CI passes on it
• @dependabot squash and merge will squash and merge this PR after your CI passes on it
• @dependabot cancel merge will cancel a previously requested merge and block automerging
• @dependabot reopen will reopen this PR if it is closed
• @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
• @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

[dependabot]

The following labels could not be found: type: enhancement, status: confirmed.