From 95df20d6a47922f3eb7eac09c9ae3099ae6e5c42 Mon Sep 17 00:00:00 2001
From: Phil Adams <phil_adams@us.ibm.com>
Date: Wed, 6 Sep 2023 09:58:47 -0500
Subject: [PATCH] fix: bump okio transitive dependency to avoid CVE

Signed-off-by: Phil Adams <phil_adams@us.ibm.com>
---
 pom.xml | 7 +++++++
 1 file changed, 7 insertions(+)

diff --git a/pom.xml b/pom.xml
index a1d44809..d40fdc49 100644
--- a/pom.xml
+++ b/pom.xml
@@ -39,6 +39,8 @@
         <junit-version>4.13.2</junit-version>
         <kotlin-version>1.6.21</kotlin-version>
 
+        <okio-version>3.5.0</okio-version>
+
         <!-- This property should be empty by default. -->
         <surefireJvmArgs></surefireJvmArgs>
     </properties>
@@ -98,6 +100,11 @@
             <artifactId>okhttp-urlconnection</artifactId>
             <version>${okhttp3-version}</version>
         </dependency>
+        <dependency>
+            <groupId>com.squareup.okio</groupId>
+            <artifactId>okio</artifactId>
+            <version>${okio-version}</version>
+        </dependency>
         <dependency>
             <groupId>com.squareup.okhttp3</groupId>
             <artifactId>mockwebserver</artifactId>