From f0a3561ba145d159ca6fa45c1c598438004d5207 Mon Sep 17 00:00:00 2001 From: SolrBot Date: Wed, 19 Nov 2025 02:17:34 +0000 Subject: [PATCH 1/2] Update dependency com.nimbusds:nimbus-jose-jwt to v10.6 --- gradle/libs.versions.toml | 2 +- solr/licenses/nimbus-jose-jwt-10.5.jar.sha1 | 1 - solr/licenses/nimbus-jose-jwt-10.6.jar.sha1 | 1 + solr/modules/jwt-auth/gradle.lockfile | 2 +- 4 files changed, 3 insertions(+), 3 deletions(-) delete mode 100644 solr/licenses/nimbus-jose-jwt-10.5.jar.sha1 create mode 100644 solr/licenses/nimbus-jose-jwt-10.6.jar.sha1 diff --git a/gradle/libs.versions.toml b/gradle/libs.versions.toml index 31a33924989..4ecf5f8be66 100644 --- a/gradle/libs.versions.toml +++ b/gradle/libs.versions.toml @@ -171,7 +171,7 @@ navsecurity = "0.5.10" netty = "4.2.6.Final" # @keep for version alignment netty-tcnative = "2.0.66.Final" -nimbusds-josejwt = "10.5" +nimbusds-josejwt = "10.6" nlopez-compose = "0.4.27" nodegradle-node = "7.1.0" # @keep Node JS version used in node.gradle (LTS) diff --git a/solr/licenses/nimbus-jose-jwt-10.5.jar.sha1 b/solr/licenses/nimbus-jose-jwt-10.5.jar.sha1 deleted file mode 100644 index d773a439be6..00000000000 --- a/solr/licenses/nimbus-jose-jwt-10.5.jar.sha1 +++ /dev/null @@ -1 +0,0 @@ -8ef880fa881a4eb9676dd6c419126aa7753d49f2 diff --git a/solr/licenses/nimbus-jose-jwt-10.6.jar.sha1 b/solr/licenses/nimbus-jose-jwt-10.6.jar.sha1 new file mode 100644 index 00000000000..8be99fe9503 --- /dev/null +++ b/solr/licenses/nimbus-jose-jwt-10.6.jar.sha1 @@ -0,0 +1 @@ +6c0b9c9b420ec7def22994c839ca85969e4e68ff diff --git a/solr/modules/jwt-auth/gradle.lockfile b/solr/modules/jwt-auth/gradle.lockfile index 1cb162af3de..983b807524b 100644 --- a/solr/modules/jwt-auth/gradle.lockfile +++ b/solr/modules/jwt-auth/gradle.lockfile @@ -33,7 +33,7 @@ com.jayway.jsonpath:json-path:2.9.0=jarValidation,runtimeClasspath,runtimeLibs,s com.lmax:disruptor:3.4.4=solrPlatformLibs com.nimbusds:content-type:2.2=jarValidation,testCompileClasspath,testRuntimeClasspath com.nimbusds:lang-tag:1.7=jarValidation,testCompileClasspath,testRuntimeClasspath -com.nimbusds:nimbus-jose-jwt:10.5=jarValidation,testCompileClasspath,testRuntimeClasspath +com.nimbusds:nimbus-jose-jwt:10.6=jarValidation,testCompileClasspath,testRuntimeClasspath com.nimbusds:oauth2-oidc-sdk:10.10.1=jarValidation,testCompileClasspath,testRuntimeClasspath com.squareup.okhttp3:mockwebserver:4.12.0=jarValidation,testCompileClasspath,testRuntimeClasspath com.squareup.okhttp3:okhttp:4.12.0=jarValidation,testCompileClasspath,testRuntimeClasspath From 241bd066fe48ec1005fc69336fd4e8c03ff8ba01 Mon Sep 17 00:00:00 2001 From: SolrBot Date: Wed, 19 Nov 2025 02:17:58 +0000 Subject: [PATCH 2/2] Add changelog entry --- .../PR#3857-update-com-nimbusds-nimbus-jose-jwt.yml | 7 +++++++ 1 file changed, 7 insertions(+) create mode 100644 changelog/unreleased/PR#3857-update-com-nimbusds-nimbus-jose-jwt.yml diff --git a/changelog/unreleased/PR#3857-update-com-nimbusds-nimbus-jose-jwt.yml b/changelog/unreleased/PR#3857-update-com-nimbusds-nimbus-jose-jwt.yml new file mode 100644 index 00000000000..9c0ced2aad5 --- /dev/null +++ b/changelog/unreleased/PR#3857-update-com-nimbusds-nimbus-jose-jwt.yml @@ -0,0 +1,7 @@ +title: Update com.nimbusds:nimbus-jose-jwt to v10.6 +type: dependency_update +authors: +- name: solrbot +links: +- name: PR#3857 + url: https://github.com/apache/solr/pull/3857