SERVER-52804 Suppress Black Duck warning for libmongocrypt v1.0.3

README.third_party.md

@@ -31,7 +31,7 @@ a notice will be included in
 | [ICU4] | ICU | 67.1 | 57.1 | ✗ | ✗ |
 | [Intel Decimal FP Library] | BSD-3-Clause | 2.0 Update 2 | 2.0 Update 1 | | ✗ |
 | [JSON-Schema-Test-Suite] | MIT | | 728066f9c5 | | |
-| [kms-message] | |   | 75e391a037 | | ✗ |
+| [kms-message] | | 1.0.4 | 1.0.1   | | ✗ |
 | [libstemmer] | BSD-3-Clause | | Unknown | ✗ | ✗ |
 | [linenoise] | BSD-3-Clause | | Unknown + changes | | ✗ |
 | [MozJS] | MPL-2.0 | ESR 68.9 | ESR 60.3.0 | | ✗ |
@@ -64,7 +64,7 @@ a notice will be included in
 [ICU4]: https://site.icu-project.org/download/
 [Intel Decimal FP Library]: https://software.intel.com/en-us/articles/intel-decimal-floating-point-math-library
 [JSON-Schema-Test-Suite]: https://github.com/json-schema-org/JSON-Schema-Test-Suite
-[kms-message]: https://github.com/mongodb-labs/kms-message
+[kms-message]: https://github.com/mongodb/libmongocrypt/kms-message
 [libstemmer]: https://github.com/snowballstem/snowball
 [linenoise]: https://github.com/antirez/linenoise
 [MozJS]: https://www.mozilla.org/en-US/security/known-vulnerabilities/firefox-esr

etc/third_party_components.yml

@@ -169,6 +169,7 @@ components:
  release_monitoring_id: -1
  local_directory_path: src/third_party/kms-message
  team_owner: "Security"
+ upgrade_suppression: TODO SERVER-52804
  # Note: libmongocrypt exists in Black Duck, but not OpenHub
 
  linenoise:

src/third_party/scripts/kms_message_get_sources.sh

@@ -18,7 +18,7 @@ if grep -q Microsoft /proc/version; then
 fi
 
 NAME=libmongocrypt
-REVISION=ebddc00f74874b8dcad8661f77d8ff51ded0318f
+REVISION=1.0.4
 
 if grep -q Microsoft /proc/version; then
  SRC_ROOT=$(wslpath -u $(powershell.exe -Command "Get-ChildItem Env:TEMP | Get-Content | Write-Host"))