Skip to content

nimbus-jose-jwt must be updated when oauth2-oidc-sdk is updated to ensure consistency #14047

@marcusdacoregio

Description

@marcusdacoregio

Since the updateDependencies plugin has been removed, we do not have a way to make sure that com.nimbusds:nimbus-jose-jwt is aligned with the transitive version that is used by com.nimbusds:oauth2-oidc-sdk.

It seems that Dependabot does not support such an arrangement. One idea is to consider a custom Gradle task that makes that check for us and does not allow the build to pass if the versions do not match.

Metadata

Metadata

Labels

Type

No type

Projects

No projects

Milestone

Relationships

None yet

Development

No branches or pull requests

Issue actions