From 827d3a509d33dcce65f0a152d622916bbdb04309 Mon Sep 17 00:00:00 2001 From: Arunav Gandhi Date: Wed, 23 Sep 2026 14:14:14 +0530 Subject: [PATCH] Update Guardian SDK to use com.auth0:java-jwt:4.6.1+ instead of com.auth0:java-jwt:4.6.0 --- gradle.properties | 1 + guardian/build.gradle | 4 ++-- 2 files changed, 3 insertions(+), 2 deletions(-) diff --git a/gradle.properties b/gradle.properties index fc4980c..05e3f40 100644 --- a/gradle.properties +++ b/gradle.properties @@ -18,6 +18,7 @@ # org.gradle.parallel=true android.defaults.buildfeatures.buildconfig=true android.enableJetifier=true +android.jetifier.ignorelist=bcprov-jdk18on android.nonFinalResIds=false android.nonTransitiveRClass=false android.useAndroidX=true diff --git a/guardian/build.gradle b/guardian/build.gradle index da3c23f..43e0346 100644 --- a/guardian/build.gradle +++ b/guardian/build.gradle @@ -92,9 +92,9 @@ dependencies { implementation 'com.squareup.okhttp3:okhttp' implementation 'com.squareup.okhttp3:logging-interceptor' // JWT signing/verification - implementation 'com.auth0:java-jwt:4.6.0' + implementation 'com.auth0:java-jwt:4.6.1' // Pin patched Jackson (fixes CVEs in the version pulled transitively by java-jwt) - implementation platform('com.fasterxml.jackson:jackson-bom:2.22.1') + implementation platform('com.fasterxml.jackson:jackson-bom:2.22.2') testImplementation 'com.squareup.okhttp3:mockwebserver' // Mockito