From 19bb1f53c799f92cec4547d430bc75265bf616db Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 4 Nov 2024 05:05:40 +0000 Subject: [PATCH] chore: Bump the gradle-version-updates group in /backend with 2 updates Bumps the gradle-version-updates group in /backend with 2 updates: [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt) and com.github.spotbugs. Updates `com.nimbusds:nimbus-jose-jwt` from 9.43 to 9.45 - [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt) - [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/9.45..9.43) Updates `com.github.spotbugs` from 6.0.25 to 6.0.26 --- updated-dependencies: - dependency-name: com.nimbusds:nimbus-jose-jwt dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates - dependency-name: com.github.spotbugs dependency-type: direct:production update-type: version-update:semver-patch dependency-group: gradle-version-updates ... Signed-off-by: dependabot[bot] --- backend/build.gradle | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/backend/build.gradle b/backend/build.gradle index b1419170..61cdb4ae 100644 --- a/backend/build.gradle +++ b/backend/build.gradle @@ -4,7 +4,7 @@ plugins { id "org.springframework.boot" version "3.3.5" id "io.spring.dependency-management" version "1.1.6" id "io.freefair.lombok" version "8.10.2" - id "com.github.spotbugs" version "6.0.25" + id "com.github.spotbugs" version "6.0.26" id "com.github.ben-manes.versions" version "0.51.0" id "org.owasp.dependencycheck" version "8.4.3" id "com.diffplug.spotless" version "6.25.0" @@ -40,7 +40,7 @@ dependencies { implementation "org.springframework.boot:spring-boot-starter-cache" implementation "org.springframework.boot:spring-boot-starter-actuator" implementation "org.springframework.boot:spring-boot-starter-oauth2-client" - implementation "com.nimbusds:nimbus-jose-jwt:9.43" // Explicit version to fix CVE-2023-52428 + implementation "com.nimbusds:nimbus-jose-jwt:9.45" // Explicit version to fix CVE-2023-52428 implementation "com.fasterxml.uuid:java-uuid-generator:${javaUuidGeneratorVersion}" implementation "net.logstash.logback:logstash-logback-encoder:${logstashVersion}" implementation "com.github.ben-manes.caffeine:caffeine:${caffeineVersion}"