From 14e54bfc20049ee24c45414495dfcc404edd3f3e Mon Sep 17 00:00:00 2001 From: Jakub Romanczyk Date: Wed, 12 Jul 2023 14:32:21 +0200 Subject: [PATCH] fix: update nimbus-jose-jwt android dependency --- .changeset/loud-lemons-grin.md | 5 +++++ packages/repack/android/build.gradle | 2 +- 2 files changed, 6 insertions(+), 1 deletion(-) create mode 100644 .changeset/loud-lemons-grin.md diff --git a/.changeset/loud-lemons-grin.md b/.changeset/loud-lemons-grin.md new file mode 100644 index 000000000..bd7332370 --- /dev/null +++ b/.changeset/loud-lemons-grin.md @@ -0,0 +1,5 @@ +--- +"@callstack/repack": patch +--- + +Update nimbus-jose-jwt android dependency to address security vulnerabilites diff --git a/packages/repack/android/build.gradle b/packages/repack/android/build.gradle index c84bcf488..0a4ba2bf4 100644 --- a/packages/repack/android/build.gradle +++ b/packages/repack/android/build.gradle @@ -128,5 +128,5 @@ dependencies { implementation "org.jetbrains.kotlin:kotlin-stdlib:$kotlin_version" implementation "com.squareup.okhttp3:okhttp:4.9.0" implementation "com.squareup.okhttp3:okhttp-urlconnection:4.9.0" - implementation 'com.nimbusds:nimbus-jose-jwt:5.1' + implementation 'com.nimbusds:nimbus-jose-jwt:9.31' }