commit 6cf297baf882fafa32108c4aa8805c12b1d84be9
author David Ostrovsky <david@ostrovsky.org> Thu Dec 27 20:34:51 2018 +0100
committer David Pursehouse <dpursehouse@collab.net> Fri Jan 11 09:18:17 2019 +0900
tree a7442802d49ab7477e1183ee575ebe9fcdfcf97c
parent a32ed26e9a7dcc22bd9d333a90ba561044053853

Upgrade JGit to 5.1.5.201812261915-r

This release fixes an issue where AdvertiseRefsHook was not called for
git-upload-pack in protocol v0 bidirectional transports, meaning that
wants aren't validated and a user can fetch anything that is pointed
to by any ref (using fetch-by-sha1), as long as they can guess the
object name.

Bug: Issue 10262
Change-Id: I4805d128fa5cbe0ea202435c899ae963faf7d7b3

lib/jgit/jgit.bzl

diff --git a/lib/jgit/jgit.bzl b/lib/jgit/jgit.bzl
index 6abfd61..29b0fe5 100644
--- a/lib/jgit/jgit.bzl
+++ b/lib/jgit/jgit.bzl
@@ -1,12 +1,12 @@
-load("//tools/bzl:maven_jar.bzl", "MAVEN_CENTRAL", "maven_jar")
+load("//tools/bzl:maven_jar.bzl", "ECLIPSE", "maven_jar")
 
-_JGIT_VERS = "5.1.3.201810200350-r"
+_JGIT_VERS = "5.1.5.201812261915-r"
 
 _DOC_VERS = _JGIT_VERS  # Set to _JGIT_VERS unless using a snapshot
 
 JGIT_DOC_URL = "http://download.eclipse.org/jgit/site/" + _DOC_VERS + "/apidocs"
 
-_JGIT_REPO = MAVEN_CENTRAL  # Leave here even if set to MAVEN_CENTRAL.
+_JGIT_REPO = ECLIPSE  # Leave here even if set to MAVEN_CENTRAL.
 
 # set this to use a local version.
 # "/home/<user>/projects/jgit"
@@ -40,28 +40,28 @@
         name = "jgit-lib",
         artifact = "org.eclipse.jgit:org.eclipse.jgit:" + _JGIT_VERS,
         repository = _JGIT_REPO,
-        sha1 = "f270dbd1d792d5ad06074abe018a18644c90b60e",
-        src_sha1 = "00e24ee2b721040edbb8520d705607a7f7bafd64",
+        sha1 = "e64c71932a2a8fdc2b86cf7d5d61c3399c64b8b1",
+        src_sha1 = "5021b94b81a4ac662a9967ac6ab725e8e099fce1",
         unsign = True,
     )
     maven_jar(
         name = "jgit-servlet",
         artifact = "org.eclipse.jgit:org.eclipse.jgit.http.server:" + _JGIT_VERS,
         repository = _JGIT_REPO,
-        sha1 = "360405244c28b537f0eafdc0b9d9f3753503d981",
+        sha1 = "98c3c1510ac44aca53e31194298b4fdd3c193ff3",
         unsign = True,
     )
     maven_jar(
         name = "jgit-archive",
         artifact = "org.eclipse.jgit:org.eclipse.jgit.archive:" + _JGIT_VERS,
         repository = _JGIT_REPO,
-        sha1 = "08e10921fcc75ead2736dd5bf099ba8e2ed8a3fb",
+        sha1 = "1a776e2d094b9a7d2cedb2cc232a7e42d8ed3275",
     )
     maven_jar(
         name = "jgit-junit",
         artifact = "org.eclipse.jgit:org.eclipse.jgit.junit:" + _JGIT_VERS,
         repository = _JGIT_REPO,
-        sha1 = "1dc8f86bba3c461cb90c9dc3e91bf343889ca684",
+        sha1 = "a0cf04fcdeb43daff3409615544b87e6b8778d6f",
         unsign = True,
     )