Copilot commented on code in PR #19807:
URL: https://github.com/apache/druid/pull/19807#discussion_r3683817038
##########
extensions-core/druid-pac4j/pom.xml:
##########
@@ -38,7 +38,7 @@
<!-- Following must be updated along with any updates to pac4j version.
One can find the compatible version of nimbus libraries in org.pac4j:pac4j-oidc
dependencies-->
<nimbus.lang.tag.version>1.7</nimbus.lang.tag.version>
- <nimbus.jose.jwt.version>9.37.3</nimbus.jose.jwt.version>
+ <nimbus.jose.jwt.version>9.37.4</nimbus.jose.jwt.version>
Review Comment:
PR description references “Dependabot alert #438”, but this PR also links
Issue #438 (which appears to be about endpoint enhancements). Using “#438” may
auto-link to the issue and be misleading for traceability. Consider updating
the PR description to either remove the “#” or link directly to the security
alert / GHSA instead of an issue number.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: [email protected]
For queries about this service, please contact Infrastructure at:
[email protected]
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
