CDCgov
Bump com.nimbusds:nimbus-jose-jwt from 10.1 to 10.3 in /prime-router
Bumps com.nimbusds:nimbus-jose-jwt from 10.1 to 10.3.
Changelog
Sourced from com.nimbusds:nimbus-jose-jwt's changelog.
10.1 (2025-04-03) * Restores module-info.java. * Adds ExpiredJWTException extends BadJWTException to enable easy programmatic detection whether a JWT has expired (iss #585). * Adds URLBasedJWKSetSource getJWKSetURL and getResourceRetriever methods to ease class extension.
10.2 (2025-04-07) * Gson is made a direct instead of a shaded dependency to address module issues introduced in 10.1 (iss #550).
10.3 (2025-05-09) * Restores the Gson shading, adding placeholder interfaces to prevent NoClassDefFoundError occurrences at runtime when the JAR is used on a module path (iss #550).
Commits
62b01de[maven-release-plugin] prepare for next development iterationecd1f8fdon't shade GSONe59e3d2public API doesn't expose GSON → remove transitive650869dMerged in feature/gson-regular-dependency (pull request #126)e52dc1eChange log for 10.21690d5aClarifies 10.2 iss #550 fix3fbd750[maven-release-plugin] prepare release 10.2a988a2d[maven-release-plugin] prepare for next development iteration5fa1dc9shade gson again800db7bMerged in feature/shaded-gson (pull request #127)- Additional commits viewable in compare view
You can trigger a rebase of this PR by commenting @dependabot rebase.
Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
![dependabot[bot] avatar](https://avatars.githubusercontent.com/in/29110?v=4 "Published by a pub.dev verified publisher"){kind=small}
Dependency Review
✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.Scanned Files
None![github-actions[bot] avatar](https://avatars.githubusercontent.com/in/15368?v=4 "Published by a pub.dev verified publisher"){kind=small}
If this is in /shared, then we probably want to look into if it's even needed here.
:white_check_mark: Snyk checks have passed. No issues have been found so far.
| Status | Scanner |  Critical |
 High |
 Medium |
 Low |
Total (0) |
|---|---|---|---|---|---|---|
| :white_check_mark: | Open Source Security | 0 | 0 | 0 | 0 | 0 issues |
:computer: Catch issues earlier using the plugins for VS Code, JetBrains IDEs, Visual Studio, and Eclipse.
Test Results
1 323 tests ±0 1 318 :white_check_mark: ±0 7m 47s :stopwatch: -10s 172 suites ±0 5 :zzz: ±0 172 files ±0 0 :x: ±0
Results for commit 6477c7e2. ± Comparison against base commit f17c9f76.
:recycle: This comment has been updated with latest results.
Integration Test Results
60 files ±0 60 suites ±0 37m 21s :stopwatch: -28s 428 tests ±0 418 :white_check_mark: ±0 10 :zzz: ±0 0 :x: ±0 431 runs ±0 421 :white_check_mark: ±0 10 :zzz: ±0 0 :x: ±0
Results for commit 6477c7e2. ± Comparison against base commit f17c9f76.
:recycle: This comment has been updated with latest results.
Quality Gate passed
Issues
0 New issues
0 Accepted issues
Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code
See analysis details on SonarQube Cloud
![sonarqubecloud[bot] avatar](https://avatars.githubusercontent.com/in/12526?v=4 "Published by a pub.dev verified publisher"){kind=small}
A newer version of com.nimbusds:nimbus-jose-jwt exists, but since this PR has been edited by someone other than Dependabot I haven't updated it. You'll get a PR for the updated version as normal once this PR is merged.
