commit 0b61aa0aa19afe84b83766572cda46f6cb529dd8
author David Ostrovsky <david@ostrovsky.org> Thu Dec 27 21:34:08 2018 +0100
committer David Pursehouse <dpursehouse@collab.net> Fri Jan 11 08:35:32 2019 +0900
tree 15ae7c7df7b876eeb3310eb6485368400843d29d
parent a9c456548354fd99f6f5d9934f90800e5b117adb

Upgrade JGit to 4.7.7.201812240805-r

This release fixes an issue where AdvertiseRefsHook was not called for
git-upload-pack in protocol v0 bidirectional transports, meaning that
wants aren't validated and a user can fetch anything that is pointed
to by any ref (using fetch-by-sha1), as long as they can guess the
object name.

Bug: Issue 10262
Change-Id: I8b81336acffc655f8d768ba84c8b95a086397b32

lib/jgit/jgit.bzl

diff --git a/lib/jgit/jgit.bzl b/lib/jgit/jgit.bzl
index 1b7e652..e010710 100644
--- a/lib/jgit/jgit.bzl
+++ b/lib/jgit/jgit.bzl
@@ -1,12 +1,12 @@
-load("//tools/bzl:maven_jar.bzl", "MAVEN_CENTRAL", "maven_jar")
+load("//tools/bzl:maven_jar.bzl", "ECLIPSE", "maven_jar")
 
-_JGIT_VERS = "4.7.6.201810191618-r"
+_JGIT_VERS = "4.7.7.201812240805-r"
 
 _DOC_VERS = _JGIT_VERS  # Set to _JGIT_VERS unless using a snapshot
 
 JGIT_DOC_URL = "http://download.eclipse.org/jgit/site/" + _DOC_VERS + "/apidocs"
 
-_JGIT_REPO = MAVEN_CENTRAL  # Leave here even if set to MAVEN_CENTRAL.
+_JGIT_REPO = ECLIPSE  # Leave here even if set to MAVEN_CENTRAL.
 
 # set this to use a local version.
 # "/home/<user>/projects/jgit"
@@ -35,28 +35,28 @@
         name = "jgit-lib",
         artifact = "org.eclipse.jgit:org.eclipse.jgit:" + _JGIT_VERS,
         repository = _JGIT_REPO,
-        sha1 = "e65c01d8f3a30a413b613f1fa5f770bfa8b62c81",
-        src_sha1 = "c837b9e774573afcb8a80ee318c2fbf1a3f29dd2",
+        sha1 = "d2358e838084d2482d51b51b70fd34a356495925",
+        src_sha1 = "29471dec1313292c0b97a9b89bc3009802145497",
         unsign = True,
     )
     maven_jar(
         name = "jgit-servlet",
         artifact = "org.eclipse.jgit:org.eclipse.jgit.http.server:" + _JGIT_VERS,
         repository = _JGIT_REPO,
-        sha1 = "e55ba5476474939aaf74c76f3aa9f377391ee043",
+        sha1 = "ed85179e4fd6aabadf00db035578dd0888c68228",
         unsign = True,
     )
     maven_jar(
         name = "jgit-archive",
         artifact = "org.eclipse.jgit:org.eclipse.jgit.archive:" + _JGIT_VERS,
         repository = _JGIT_REPO,
-        sha1 = "6d873357c44f217f59f52a70cd91fa30bd80e79a",
+        sha1 = "83820dc9253d6e1450742cbea9f7de265caf2a89",
     )
     maven_jar(
         name = "jgit-junit",
         artifact = "org.eclipse.jgit:org.eclipse.jgit.junit:" + _JGIT_VERS,
         repository = _JGIT_REPO,
-        sha1 = "50932594f877a56f88d2a5ab4b19198a4dfd495a",
+        sha1 = "3275d89afdad003b03a055a8a2b838cc512cd2fc",
         unsign = True,
     )