Bouncycastle dependency vulnerability

[binpower93]

Description

https://security.snyk.io/vuln/SNYK-JAVA-ORGBOUNCYCASTLE-6612984

Version of bouncy castle 1.77 has a vulnerability according to Snyk, whereas 1.78 doesn't. I believe that develop branch is using 1.78, but isn't yet included in a release

Steps to Reproduce

Robolectric & Android Version

Link to a public git repo demonstrating the problem:

[MGaetan89]

I don't know when the next release of Robolectric is scheduled, but if this a blocker for you, you can try one of the following:

• Use a snapshot of Robolectric
• Include BouncyCastle 1.78 in your repository directly (no changes were necessary inside Robolectric for this update, as per Bump org.bouncycastle:bcprov-jdk18on from 1.77 to 1.78 #8975)