This is an automated email from the ASF dual-hosted git repository.
merlimat pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/pulsar.git
The following commit(s) were added to refs/heads/master by this push:
new 663741e74fd [improve][sec] Upgrade Auth0 java-jwt to 4.5.2 and
jwks-rsa to 0.23.1 (#25672)
663741e74fd is described below
commit 663741e74fde29058c9f1ce1af2a5aaeb8f7b8bf
Author: Lari Hotari <[email protected]>
AuthorDate: Tue May 5 18:31:07 2026 +0300
[improve][sec] Upgrade Auth0 java-jwt to 4.5.2 and jwks-rsa to 0.23.1
(#25672)
---
distribution/server/src/assemble/LICENSE.bin.txt | 4 ++--
gradle/libs.versions.toml | 4 ++--
2 files changed, 4 insertions(+), 4 deletions(-)
diff --git a/distribution/server/src/assemble/LICENSE.bin.txt
b/distribution/server/src/assemble/LICENSE.bin.txt
index f61c33a6414..658ff1e06cd 100644
--- a/distribution/server/src/assemble/LICENSE.bin.txt
+++ b/distribution/server/src/assemble/LICENSE.bin.txt
@@ -583,8 +583,8 @@ MIT License
* oshi
- com.github.oshi-oshi-core-java11-6.4.0.jar
* Auth0, Inc.
- - com.auth0-java-jwt-4.3.0.jar
- - com.auth0-jwks-rsa-0.22.0.jar
+ - com.auth0-java-jwt-4.5.2.jar
+ - com.auth0-jwks-rsa-0.23.1.jar
Protocol Buffers License
* Protocol Buffers
- com.google.protobuf-protobuf-java-3.25.5.jar --
../licenses/LICENSE-protobuf.txt
diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml
index e5cc578fdc3..09e0d8a26c9 100644
--- a/gradle/libs.versions.toml
+++ b/gradle/libs.versions.toml
@@ -100,8 +100,8 @@ jsonwebtoken = "0.13.0"
athenz = "1.10.62"
jose4j = "0.9.6"
nimbus-jose-jwt = "9.37.4"
-auth0-java-jwt = "4.3.0"
-auth0-jwks-rsa = "0.22.0"
+auth0-java-jwt = "4.5.2"
+auth0-jwks-rsa = "0.23.1"
# CLI
picocli = "4.7.5"
jline3 = "3.21.0"
