From 05e5fe666ecc15be5d7582b56a10774d770337f5 Mon Sep 17 00:00:00 2001 From: Eric Sanjaya Date: Tue, 6 May 2025 12:14:16 +0800 Subject: [PATCH 1/5] chore: update kotlin to 1.9.25 --- build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle.kts b/build.gradle.kts index 88d79d5..6a39c59 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -22,7 +22,7 @@ apply(from = "gradle/gradle-mvn-push.gradle") apply(plugin = "idea") plugins { - kotlin("jvm") version "1.9.0" + kotlin("jvm") version "1.9.25" `maven-publish` `java-library` id("org.jetbrains.dokka") version "1.9.20" From f3771d0bee8a901fee2212bf3a7444650234597f Mon Sep 17 00:00:00 2001 From: Eric Sanjaya Date: Tue, 6 May 2025 12:28:14 +0800 Subject: [PATCH 2/5] chore: update protobuf-java to 4.29.4 --- build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle.kts b/build.gradle.kts index 6a39c59..2d0a0b4 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -81,7 +81,7 @@ spotless { val protoc_platform: String? by project val protoSrc = File("$projectDir/protocol/protobufs/").listFiles { f -> f.isFile } -val protobufVersion = "3.25.6" +val protobufVersion = "4.29.4" val protobufDep = "com.google.protobuf:protobuf-java:$protobufVersion" protobuf { protoc { From 52b2b3846dcfd5fe6ed38e905da285b4a5a67594 Mon Sep 17 00:00:00 2001 From: Eric Sanjaya Date: Tue, 6 May 2025 12:31:57 +0800 Subject: [PATCH 3/5] chore: update retrofit to 2.11.0 --- build.gradle.kts | 4 ++-- 1 file changed, 2 insertions(+), 2 deletions(-) diff --git a/build.gradle.kts b/build.gradle.kts index 2d0a0b4..414c458 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -133,8 +133,8 @@ val javadocJar = tasks.named("javadocJar") { dependencies { protobuf(files(*protoSrc)) implementation("com.squareup.okhttp3:logging-interceptor:4.12.0") - api("com.squareup.retrofit2:retrofit:2.9.0") - implementation("com.squareup.retrofit2:converter-protobuf:2.9.0") + api("com.squareup.retrofit2:retrofit:2.11.0") + implementation("com.squareup.retrofit2:converter-protobuf:2.11.0") implementation("com.auth0:java-jwt:4.2.1") api(protobufDep) api("com.google.protobuf:protobuf-java-util:$protobufVersion") From 4caeb22887e0564bf0aa232f486fb248ba2fbd4c Mon Sep 17 00:00:00 2001 From: Eric Sanjaya Date: Tue, 6 May 2025 12:35:30 +0800 Subject: [PATCH 4/5] chore: update java-jwt to 4.5.0 --- build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle.kts b/build.gradle.kts index 414c458..52ca889 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -135,7 +135,7 @@ dependencies { implementation("com.squareup.okhttp3:logging-interceptor:4.12.0") api("com.squareup.retrofit2:retrofit:2.11.0") implementation("com.squareup.retrofit2:converter-protobuf:2.11.0") - implementation("com.auth0:java-jwt:4.2.1") + implementation("com.auth0:java-jwt:4.5.0") api(protobufDep) api("com.google.protobuf:protobuf-java-util:$protobufVersion") implementation("javax.annotation:javax.annotation-api:1.3.2") From 49f146ade6be1723c2dcdf130e96616ca0d5c291 Mon Sep 17 00:00:00 2001 From: Eric Sanjaya Date: Tue, 6 May 2025 13:41:32 +0800 Subject: [PATCH 5/5] chore: changeset --- .changeset/slow-hotels-float.md | 38 +++++++++++++++++++++++++++++++++ 1 file changed, 38 insertions(+) create mode 100644 .changeset/slow-hotels-float.md diff --git a/.changeset/slow-hotels-float.md b/.changeset/slow-hotels-float.md new file mode 100644 index 0000000..ad55b26 --- /dev/null +++ b/.changeset/slow-hotels-float.md @@ -0,0 +1,38 @@ +--- +"server-sdk-kotlin": patch +--- + +### Kotlin +- **Update to Kotlin 1.9.25** + Upgraded to the latest patch version for better stability and compatibility with newer tools. + _Reference_: [Kotlin 1.9.25 Release Notes](https://kotlinlang.org/docs/whatsnew1920.html) + +--- + +### Protobuf +- **Update `protobufVersion` to 4.29.4** + Ensures compatibility with the MySQL JDBC connector. + _Note_: Previous versions had compatibility issues when working with certain database drivers. + +--- + +### Retrofit +- **Update `com.squareup.retrofit2:retrofit` to 2.11.0** +- **Update `com.squareup.retrofit2:converter-protobuf` to 2.11.0** + Fixes vulnerabilities reported in older versions of Retrofit. + _Reference_: [Retrofit 2.11.0 Changelog](https://github.com/square/retrofit/blob/master/CHANGELOG.md) + _Security Advisory_: + - [CVE-2023-2976](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2023-2976) + - [CVE-2022-24329](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2022-24329) + - [CVE-2020-8908](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-8908) + - [CVE-2020-29582](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-29582) + - [CVE-2020-15250](https://cve.mitre.org/cgi-bin/cvename.cgi?name=CVE-2020-15250) + +--- + +### Auth0 Java JWT +- **Update `com.auth0:java-jwt` to 4.5.0** + Addresses security issues in earlier releases and includes bug fixes. + _Reference_: [java-jwt GitHub Releases](https://github.com/auth0/java-jwt/releases) + +---