From ff537061a48cb1864694d9cf7394f5638ec86621 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Mon, 13 Jan 2025 07:56:14 +0000 Subject: [PATCH] fix(deps): bump com.squareup.okio:okio from 3.9.1 to 3.10.2 Bumps [com.squareup.okio:okio](https://github.com/square/okio) from 3.9.1 to 3.10.2. - [Release notes](https://github.com/square/okio/releases) - [Changelog](https://github.com/square/okio/blob/master/CHANGELOG.md) - [Commits](https://github.com/square/okio/compare/3.9.1...3.10.2) --- updated-dependencies: - dependency-name: com.squareup.okio:okio dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- sda-commons-dependencies/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/sda-commons-dependencies/build.gradle b/sda-commons-dependencies/build.gradle index 95181d636..ebc4cd804 100644 --- a/sda-commons-dependencies/build.gradle +++ b/sda-commons-dependencies/build.gradle @@ -214,7 +214,7 @@ dependencies { api "io.opentelemetry.instrumentation:opentelemetry-instrumentation-api:2.11.0" api "io.opentelemetry.instrumentation:opentelemetry-instrumentation-api-semconv:1.33.6-alpha" api "com.squareup.okhttp3:okhttp:4.12.0" // bump from 4.9.3 used in opentelemetry-exporter-otlp-common - api 'com.squareup.okio:okio:3.9.1', { + api 'com.squareup.okio:okio:3.10.2', { because 'CVE-2023-3635 in 3.2.0' }