POI is using openpgp for its release process and I'd like to update it to the current bouncycastle version,
i.e. I've done it already locally, but I'd prefer if the Apache repo  could be updated too.
How could we achieve this?
(provide a patch file / D-I-Y ;) / ...)