Update httpcore library to v5

[anabright]

Description

The latest version of the org.eclipse.jgit.http.apache lib (7.7.0.202606012155-r) has a dependency on httpcore v4 (specifically 4.4.16) which has reached EOL and has a couple of vulnerabilities (CVE-2026-54399 and CVE-2026-54428).

Can this dependency be upgraded to httpcore v5?

Motivation

To address vulnerabilities in third party libraries

Alternatives considered

No response

Additional context

No response

[kwin]

Both CVEs you mention don't affect HttpCore 4.x AFAIK.

[anabright]

Both CVEs you mention don't affect HttpCore 4.x AFAIK.

You are right. They must have updated the affected versions because when I wrote my original post, 4.x was definitely included.

An upgrade to v5 would still be nice as v4 has reached EOL.