fix: Bump Bouncy Castle to fix CVE-2025-8916

.codegen.json

@@ -0,0 +1 @@
+{ "engineHash": "724276f", "specHash": "1ed059a", "version": "0.1.0" }

.github/workflows/autoupdate-pr.yml

@@ -0,0 +1,39 @@
+name: Autoupdate PR
+on:
+  push:
+    branches:
+      - combined-sdk
+
+jobs:
+  update_pull_requests:
+    runs-on: ubuntu-latest
+
+    steps:
+      - name: Checkout repository
+        uses: actions/checkout@v4
+        with:
+          token: ${{ secrets.DISPATCH_ACCESS_TOKEN }}
+
+      - name: Set up Git
+        run: |
+          git config --global user.name 'box-sdk-build'
+          git config --global user.email 'box-sdk-build@box.com'
+
+      - name: Fetch all branches and tags
+        run: git fetch --prune --unshallow
+
+      - name: Auto update pull requests
+        run: |
+          PR_LIST=$(curl -s -H "Authorization: Bearer ${{ secrets.DISPATCH_ACCESS_TOKEN }}" "https://api.github.com/repos/$GITHUB_REPOSITORY/pulls?state=open" | jq -r '.[] | .head.ref')
+          for pr_branch in $PR_LIST; do
+            git checkout "$pr_branch"
+            if git merge origin/combined-sdk; then
+              git push
+            else
+              # Conflict occurred, resolve by keeping our changes
+              git checkout --ours .
+              git add .
+              git commit -m "Auto resolve conflict by keeping our changes"
+              git push
+            fi
+          done

.github/workflows/integration-tests-sdk.yml

@@ -0,0 +1,34 @@
+name: Integration tests sdk
+on:
+  pull_request:
+    branches:
+      - combined-sdk
+jobs:
+  core:
+    runs-on: ubuntu-latest
+    steps:
+      - name: Checkout
+        uses: actions/checkout@v4
+      - name: Setup Java
+        uses: actions/setup-java@v4
+        with:
+          distribution: 'temurin'
+          java-version: '8'
+      - name: All Tests
+        if: startsWith(github.head_ref, 'codegen-release')
+        env:
+          JAVA_COLLABORATOR_ID: ${{ secrets.JAVA_COLLABORATOR_ID }}
+          JAVA_COLLABORATOR: ${{ secrets.JAVA_COLLABORATOR }}
+          JAVA_ENTERPRISE_ID: ${{ secrets.JAVA_ENTERPRISE_ID }}
+          JAVA_JWT_CONFIG: ${{ secrets.JAVA_JWT_CONFIG }}
+          JAVA_USER_ID: ${{ secrets.JAVA_USER_ID }}
+        run: ./gradlew integrationTest --stacktrace
+      - name: Smoke Tests
+        if: "!startsWith(github.head_ref, 'codegen-release')"
+        env:
+          JAVA_COLLABORATOR_ID: ${{ secrets.JAVA_COLLABORATOR_ID }}
+          JAVA_COLLABORATOR: ${{ secrets.JAVA_COLLABORATOR }}
+          JAVA_ENTERPRISE_ID: ${{ secrets.JAVA_ENTERPRISE_ID }}
+          JAVA_JWT_CONFIG: ${{ secrets.JAVA_JWT_CONFIG }}
+          JAVA_USER_ID: ${{ secrets.JAVA_USER_ID }}
+        run: ./gradlew smokeTest --stacktrace

.github/workflows/build-and-test-daily.yml → .github/workflows/integration-tests-sdkgen.yml

@@ -1,28 +1,28 @@
-name: Build and Test daily (sdk-gen)
+name: Integration tests sdkgen
 on:
-  schedule:
-    - cron: "20 1 * * 1-5"
+  pull_request:
+    branches:
+      - combined-sdk
 jobs:
   build-and-test:
     runs-on: ubuntu-latest
     strategy:
       max-parallel: 1
       matrix:
-        distribution: ["zulu", "temurin"]
-        java: ["8", "17"]
+        distribution: ['zulu', 'temurin']
+        java: ['8', '17']
     name: Java ${{ matrix.java }} (${{ matrix.distribution }})
     steps:
       - name: Checkout
         uses: actions/checkout@v4
-        with:
-          ref: sdk-gen
       - name: Setup Java
         uses: actions/setup-java@v4
         with:
           distribution: ${{ matrix.distribution }}
           java-version: ${{ matrix.java }}
-          cache: "gradle"
+          cache: 'gradle'
       - name: All Tests
+        if: startsWith(github.head_ref, 'codegen-release')
         env:
           JWT_CONFIG_BASE_64: ${{ secrets.JWT_CONFIG_BASE_64 }}
           ADMIN_USER_ID: ${{ secrets.ADMIN_USER_ID }}
@@ -40,28 +40,13 @@ jobs:
           SLACK_AUTOMATION_USER_ID: ${{ secrets.SLACK_AUTOMATION_USER_ID }}
           SLACK_ORG_ID: ${{ secrets.SLACK_ORG_ID }}
           SLACK_PARTNER_ITEM_ID: ${{ secrets.SLACK_PARTNER_ITEM_ID }}
-        run: ./gradlew check --stacktrace
-      - name: Coverage
+        run: ./gradlew integrationTestGen --stacktrace
+      - name: Smoke Tests
+        if: "!startsWith(github.head_ref, 'codegen-release')"
         env:
-          GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: ./gradlew jacocoTestReport coverallsJacoco
-  notify:
-    name: Send Slack Notification
-    runs-on: ubuntu-latest
-    needs: [build-and-test]
-    if: always()
-    steps:
-      - name: Send Slack Notification
-        env:
-          SLACK_WEBHOOK_TEST_NOTIFICATION_URL: ${{ secrets.SLACK_WEBHOOK_TEST_NOTIFICATION_URL }}
-          BUILD_URL: ${{ github.server_url }}/${{ github.repository }}/actions/runs/${{ github.run_id }}
-        run: |
-          if [ "${{ needs.build-and-test.result }}" != "success" ]; then
-            STATUS="Failure ❌"
-          else
-            STATUS="Success ✅"
-          fi
-
-          curl -X POST -H "Content-Type: application/json" \
-            --data "{\"text\":\"<${BUILD_URL}|Daily Tests Job> in *${GITHUB_REPOSITORY}* finished with status: ${STATUS}\"}" \
-            "$SLACK_WEBHOOK_TEST_NOTIFICATION_URL"
+          JWT_CONFIG_BASE_64: ${{ secrets.JWT_CONFIG_BASE_64 }}
+          CLIENT_ID: ${{ secrets.CLIENT_ID }}
+          CLIENT_SECRET: ${{ secrets.CLIENT_SECRET }}
+          USER_ID: ${{ secrets.USER_ID }}
+          ENTERPRISE_ID: ${{ secrets.ENTERPRISE_ID }}
+        run: ./gradlew smokeTestGen --stacktrace

.github/workflows/semantic-pr.yml

@@ -6,6 +6,8 @@ on:
       - opened
       - edited
       - synchronize
+    branches:
+      - combined-sdk
 
 jobs:
   main:

.github/workflows/spell-check-lint.yml

@@ -1,9 +1,9 @@
 name: spell-check-lint
 on:
   pull_request_target:
-    types: [ opened, synchronize, edited ]
+    types: [opened, synchronize, edited]
     branches:
-      - main
+      - combined-sdk
 jobs:
   spellcheck-request-title:
     runs-on: ubuntu-latest

.github/workflows/build-main.yml → .github/workflows/unit-tests.yml

@@ -1,10 +1,10 @@
-name: build-main
+name: Unit tests and Coverage
 on:
   pull_request:
     types: [ opened, synchronize ]
   push:
     branches:
-      - main
+      - combined-sdk
 jobs:
   build-and-test:
     runs-on: ubuntu-latest
@@ -24,7 +24,9 @@ jobs:
           cache: 'gradle'
       - name: Build and test
         run: ./gradlew check --stacktrace
-      - name: Coverage
+      - name: Generate JaCoCo report
+        run: ./gradlew jacocoTestReport --stacktrace
+      - name: Upload coverage to Coveralls
         env:
           GITHUB_TOKEN: ${{ secrets.GITHUB_TOKEN }}
-        run: ./gradlew jacocoTestReport coverallsJacoco
+        run: ./gradlew coverallsJacoco --stacktrace

CHANGELOG.md

@@ -288,7 +288,7 @@ The most important change this release includes is the replacement of the HTTP l
 * `BoxEvent.Type` is replaced with `EventType`
 * Removing deprecated methods from `BoxFile`, `BoxFileVersionRetention`, `BoxFolder`, `BoxGroup`, `BoxGroupMembership`,`BoxItem`, `BoxRetentionPolicy`, `BoxTask`, `BoxUser`, `BoxWebLink`, `EventLog`, `Metadata` and `MetadataTemplate`.
 
-Migration details can be found [here](doc/upgrades/3.x.x%20to%204.x.x.md).
+Migration details can be found [here](migration-guides/3.x.x%20to%204.x.x.md).
 
 ### New Features and Enhancements: