From a2d06ee964bc99cd602a13cffe55f4b5fa9f2c74 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Thu, 23 Jan 2025 04:11:27 +0000 Subject: [PATCH] chore: Bump com.nimbusds:nimbus-jose-jwt from 9.48 to 10.0.1 in /backend Bumps [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) from 9.48 to 10.0.1. - [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt) - [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/10.0.1..9.48) --- updated-dependencies: - dependency-name: com.nimbusds:nimbus-jose-jwt dependency-type: direct:production update-type: version-update:semver-major ... Signed-off-by: dependabot[bot] --- backend/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/build.gradle b/backend/build.gradle index bf074c35..5256754e 100644 --- a/backend/build.gradle +++ b/backend/build.gradle @@ -46,7 +46,7 @@ dependencies { implementation "org.liquibase:liquibase-core" implementation "org.xerial:sqlite-jdbc:${sqliteJdbcVersion}" implementation "org.komamitsu:spring-data-sqlite:${springDataSqliteVersion}" - implementation "com.nimbusds:nimbus-jose-jwt:9.48" // Explicit version to fix CVE-2023-52428 + implementation "com.nimbusds:nimbus-jose-jwt:10.0.1" // Explicit version to fix CVE-2023-52428 implementation "com.fasterxml.uuid:java-uuid-generator:${javaUuidGeneratorVersion}" implementation "net.logstash.logback:logstash-logback-encoder:${logstashVersion}" implementation "com.github.ben-manes.caffeine:caffeine:${caffeineVersion}"