Bump nimbus-jose-jwt to 9.31

snowplow · Jul 11, 2023 · 12cc0d3 · 12cc0d3
1 parent 1c3c7c5
commit 12cc0d3
Showing 1 changed file with 3 additions and 0 deletions.
diff --git a/project/Dependencies.scala b/project/Dependencies.scala
@@ -52,6 +52,7 @@ object Dependencies {
     val hadoopGcpClient  = "hadoop3-2.2.5"
     val parquetHadoop    = "1.12.3"
     val jsonSmart        = "2.4.9" // Fix CVE
+    val nimbusJose       = "9.31" // Fix CVE
     val snappyJava       = "1.1.10.1" // Fix CVE
     val commonsText      = "1.10.0" // Fix CVE
     val ivy              = "2.5.1" // Fix CVE
@@ -141,6 +142,7 @@ object Dependencies {
     .exclude("com.amazonaws", "aws-java-sdk-bundle") // aws-java-sdk-core is already present in assembled jar
   val hadoopGcp         = "com.google.cloud.bigdataoss"      % "gcs-connector"             % V.hadoopGcpClient % Runtime
   val jsonSmart         = "net.minidev"                      % "json-smart"                % V.jsonSmart
+  val nimbusJose        = ("com.nimbusds"                    % "nimbus-jose-jwt"           % V.nimbusJose)
   val snappyJava        = "org.xerial.snappy"                % "snappy-java"               % V.snappyJava
   val kinesisClient     = ("software.amazon.kinesis"         %  "amazon-kinesis-client"    % V.kinesisClient)
                           .exclude("software.amazon.glue", "schema-registry-common")
@@ -306,6 +308,7 @@ object Dependencies {
     hadoop,
     parquetHadoop,
     jsonSmart,
+    nimbusJose,
     snappyJava,
     specs2,
     specs2ScalaCheck,