build(dependencies): Update OkHttp to 4.11.0 [SDK-4501]

[evansims]

Changes

This pull request updates the OkHttp dependency to address a moderate security vulnerability in the imported version. This bumps the included release to 4.11.0 to address CVE-2023-3635.

References

Please see internal ticket SDK-4501.

Testing

No added tests were necessary.

Checklist

• I have read the Auth0 general contribution guidelines
• I have read the Auth0 Code of Conduct
• All existing and new tests complete without errors

[evansims]

@jimmyjames Not familiar enough to really diagnose why the build is failing here; would you mind taking a look?

Appears to be related to a kotlin-stdlib-jdk8 dependency locking issue resolved in 4.11.0 which addresses the CVE, but not sure how to accommodate this change on our end

[poovamraj]

Just a doubt on the "Unreleased" heading on the CHANGELOG. We usually add these during the release under the version. Is this something new we want to try out? Also this has to be removed during the release so is it automated or should the dev remember to remove this?

[evansims]

Just a doubt on the "Unreleased" heading on the CHANGELOG. We usually add these during the release under the version. Is this something new we want to try out? Also this has to be removed during the release so is it automated or should the dev remember to remove this?

Ah apologies, just a (personal) practice picked up from the PHP side — not a new policy or anything or workflow thing. I don't use automated releasing, so this is a manual method for me to keep track. Force of habit!

[evansims]

@poovamraj Removed the erroneous CHANGELOG update, if you'd be so kind as to re-review 😄