Skip to content

Commit c23e8f0

Browse files
authored
Update Kotlin, Protobuf, Retrofit, Auth0 Java JWT (#119)
* chore: update kotlin to 1.9.25 * chore: update protobuf-java to 4.29.4 * chore: update retrofit to 2.11.0 * chore: update java-jwt to 4.5.0 * chore: changeset
1 parent 40f594f commit c23e8f0

File tree

2 files changed

+43
-5
lines changed

2 files changed

+43
-5
lines changed

.changeset/slow-hotels-float.md

Lines changed: 38 additions & 0 deletions
Original file line numberDiff line numberDiff line change
@@ -0,0 +1,38 @@
1+
---
2+
"server-sdk-kotlin": patch
3+
---
4+
5+
### Kotlin
6+
- **Update to Kotlin 1.9.25**
7+
Upgraded to the latest patch version for better stability and compatibility with newer tools.
8+
_Reference_: [Kotlin 1.9.25 Release Notes](https://kotlinlang.org/docs/whatsnew1920.html)
9+
10+
---
11+
12+
### Protobuf
13+
- **Update `protobufVersion` to 4.29.4**
14+
Ensures compatibility with the MySQL JDBC connector.
15+
_Note_: Previous versions had compatibility issues when working with certain database drivers.
16+
17+
---
18+
19+
### Retrofit
20+
- **Update `com.squareup.retrofit2:retrofit` to 2.11.0**
21+
- **Update `com.squareup.retrofit2:converter-protobuf` to 2.11.0**
22+
Fixes vulnerabilities reported in older versions of Retrofit.
23+
_Reference_: [Retrofit 2.11.0 Changelog](https://github.com/square/retrofit/blob/master/CHANGELOG.md)
24+
_Security Advisory_:
25+
- [CVE-2023-2976](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2976)
26+
- [CVE-2022-24329](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24329)
27+
- [CVE-2020-8908](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8908)
28+
- [CVE-2020-29582](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29582)
29+
- [CVE-2020-15250](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15250)
30+
31+
---
32+
33+
### Auth0 Java JWT
34+
- **Update `com.auth0:java-jwt` to 4.5.0**
35+
Addresses security issues in earlier releases and includes bug fixes.
36+
_Reference_: [java-jwt GitHub Releases](https://github.com/auth0/java-jwt/releases)
37+
38+
---

build.gradle.kts

Lines changed: 5 additions & 5 deletions
Original file line numberDiff line numberDiff line change
@@ -22,7 +22,7 @@ apply(from = "gradle/gradle-mvn-push.gradle")
2222
apply(plugin = "idea")
2323

2424
plugins {
25-
kotlin("jvm") version "1.9.0"
25+
kotlin("jvm") version "1.9.25"
2626
`maven-publish`
2727
`java-library`
2828
id("org.jetbrains.dokka") version "1.9.20"
@@ -81,7 +81,7 @@ spotless {
8181
val protoc_platform: String? by project
8282
val protoSrc = File("$projectDir/protocol/protobufs/").listFiles { f -> f.isFile }
8383

84-
val protobufVersion = "3.25.6"
84+
val protobufVersion = "4.29.4"
8585
val protobufDep = "com.google.protobuf:protobuf-java:$protobufVersion"
8686
protobuf {
8787
protoc {
@@ -133,9 +133,9 @@ val javadocJar = tasks.named<Jar>("javadocJar") {
133133
dependencies {
134134
protobuf(files(*protoSrc))
135135
implementation("com.squareup.okhttp3:logging-interceptor:4.12.0")
136-
api("com.squareup.retrofit2:retrofit:2.9.0")
137-
implementation("com.squareup.retrofit2:converter-protobuf:2.9.0")
138-
implementation("com.auth0:java-jwt:4.2.1")
136+
api("com.squareup.retrofit2:retrofit:2.11.0")
137+
implementation("com.squareup.retrofit2:converter-protobuf:2.11.0")
138+
implementation("com.auth0:java-jwt:4.5.0")
139139
api(protobufDep)
140140
api("com.google.protobuf:protobuf-java-util:$protobufVersion")
141141
implementation("javax.annotation:javax.annotation-api:1.3.2")

0 commit comments

Comments
 (0)