From 34e5caa27d0fc64c42b8ab295047944c269a47a9 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 23 Dec 2024 04:18:29 +0000 Subject: [PATCH] chore: Bump com.nimbusds:nimbus-jose-jwt Bumps the gradle-version-updates group in /backend with 1 update: [com.nimbusds:nimbus-jose-jwt](https://bitbucket.org/connect2id/nimbus-jose-jwt). Updates `com.nimbusds:nimbus-jose-jwt` from 9.47 to 9.48 - [Changelog](https://bitbucket.org/connect2id/nimbus-jose-jwt/src/master/CHANGELOG.txt) - [Commits](https://bitbucket.org/connect2id/nimbus-jose-jwt/branches/compare/9.48..9.47) --- updated-dependencies: - dependency-name: com.nimbusds:nimbus-jose-jwt dependency-type: direct:production update-type: version-update:semver-minor dependency-group: gradle-version-updates ... Signed-off-by: dependabot[bot] --- backend/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/backend/build.gradle b/backend/build.gradle index dfbeaebc..79c1e4da 100644 --- a/backend/build.gradle +++ b/backend/build.gradle @@ -40,7 +40,7 @@ dependencies { implementation "org.springframework.boot:spring-boot-starter-cache" implementation "org.springframework.boot:spring-boot-starter-actuator" implementation "org.springframework.boot:spring-boot-starter-oauth2-client" - implementation "com.nimbusds:nimbus-jose-jwt:9.47" // Explicit version to fix CVE-2023-52428 + implementation "com.nimbusds:nimbus-jose-jwt:9.48" // Explicit version to fix CVE-2023-52428 implementation "com.fasterxml.uuid:java-uuid-generator:${javaUuidGeneratorVersion}" implementation "net.logstash.logback:logstash-logback-encoder:${logstashVersion}" implementation "com.github.ben-manes.caffeine:caffeine:${caffeineVersion}"