Hi elastic team!
I was looking through the code base for which bouncycastle version is used in v7.7.0 and was a bit confused by what I found.
In https://github.com/elastic/elasticsearch/blob/v7.7.0/buildSrc/version.properties#L30 I found that allegedly it's 1.64. https://github.com/elastic/elasticsearch/blob/333a5d8cdf2783664d1d5a80d0b2534d6bbe635d/plugins/ingest-attachment/build.gradle#L55-L57 confirms this by using the version from the version properties file.
However, for instance in https://github.com/elastic/elasticsearch/blob/v7.7.0/distribution/tools/plugin-cli/build.gradle#L29-L30 instead of using the version from the version properties file, it's hardcoded to 1.0.3 and 1.0.1 respectively.
I was wondering whether that's intentional or not and if it is, then I'd like to know what's the reason for not using 1.64 as set in the version properties file.
Looking forward to hear from you about this. Thanks in advance!
Best regards,
Josephine