build(deps): temporary dependency on okio 3.4.0 - Githubissues

IBM / cloudant-java-sdk

Cloudant SDK for Java

Apache License 2.0

22 stars 17 forks source link

build(deps): temporary dependency on okio 3.4.0 #456

Closed ricellis closed 1 year ago

ricellis commented 1 year ago

PR summary

Temprorarily add a direct dependency on okio 3.4.0.

PR Checklist

Please make sure that your PR fulfills the following requirements:

[ ] The commit message follows the Angular Commit Message Guidelines.
[ ] Tests for the changes have been added (for bug fixes / features)
[ ] Docs have been added / updated (for bug fixes / features)

PR Type

[ ] Bugfix
[ ] Feature
[ ] Code style update (formatting, local variables)
[ ] Refactoring (no functional changes, no api changes)
[ ] New tests
[x] Build/CI related changes
[ ] Documentation content changes
[ ] Other (please describe)

What is the current behavior?

okio is a transitive dependency at 3.2.0 from okhttp 4.11.0

What is the new behavior?

Upgrade okio to version 3.4.0 because of CVE-2023-3635.

Does this PR introduce a breaking change?

[ ] Yes
[x] No

Other information