Skip to content
Merged
Show file tree
Hide file tree
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions lib/build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -31,9 +31,9 @@ dependencies {
testImplementation "org.mockito:mockito-core:3.12.4"
testImplementation "org.slf4j:slf4j-nop:1.7.34"

implementation 'com.google.code.gson:gson:2.8.9'
implementation 'com.google.guava:guava:33.6.0-android'
implementation group: 'org.bouncycastle', name: 'bcprov-jdk18on', version: '1.84'
implementation 'com.google.code.gson:gson:2.14.0'

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Highest-risk change in this PR. Jumping gson 2.8.9 → 2.14.0 crosses several minor releases with behavioral changes (new Strictness/stricter number parsing since 2.11, the 2.14 duplicate-key handling change, removal of Serializable from internal Type impls, new java.time adapters). This SDK relies on lenient quoted-number coercion (e.g. TokenResult.expiry:long from "1234567890", CardData.cvv:int from "123") and on the internal com.google.gson.internal.LinkedTreeMap in WhenPerformingHttpRequestTests. Please confirm the failing test(s) here — and consider isolating the gson bump in its own PR.

implementation 'com.google.guava:guava:33.7.1-android'
implementation group: 'org.bouncycastle', name: 'bcprov-jdk18on', version: '1.85.2'

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

bcprov-jdk18on 1.84 → 1.85.2 is a crypto bump; EncryptionService uses the deprecated new GCMBlockCipher(new AESEngine()) / new SHA256Digest() primitives, so any behavior change would hit the E2E encrypt/decrypt tests. Separately, Socket flagged a High severity license-policy violation for bcprov-jdk18on@1.85.2 (Bouncy Castle Licence not allowed by org policy) that will need triage/waiver.

implementation group: 'org.apache.httpcomponents', name: 'httpclient', version: '4.5.14'

}
Expand Down
10 changes: 5 additions & 5 deletions lib/gradle.lockfile
Original file line number Diff line number Diff line change
Expand Up @@ -8,10 +8,10 @@ com.fasterxml.jackson:jackson-bom:2.13.0=testCompileClasspath,testRuntimeClasspa
com.github.jknack:handlebars-helpers:4.3.0=testCompileClasspath,testRuntimeClasspath
com.github.jknack:handlebars:4.3.0=testCompileClasspath,testRuntimeClasspath
com.github.tomakehurst:wiremock-jre8:2.32.0=testCompileClasspath,testRuntimeClasspath
com.google.code.gson:gson:2.8.9=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
com.google.errorprone:error_prone_annotations:2.47.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
com.google.code.gson:gson:2.14.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
com.google.errorprone:error_prone_annotations:2.50.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
com.google.guava:failureaccess:1.0.3=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
com.google.guava:guava:33.6.0-android=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
com.google.guava:guava:33.7.1-android=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
com.google.guava:listenablefuture:9999.0-empty-to-avoid-conflict-with-guava=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
com.google.j2objc:j2objc-annotations:3.1=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
com.jayway.jsonpath:json-path:2.6.0=testCompileClasspath,testRuntimeClasspath
Expand All @@ -34,7 +34,7 @@ org.apache.httpcomponents.core5:httpcore5:5.1.1=testCompileClasspath,testRuntime
org.apache.httpcomponents:httpclient:4.5.14=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
org.apache.httpcomponents:httpcore:4.4.16=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
org.apiguardian:apiguardian-api:1.1.0=testCompileClasspath,testRuntimeClasspath
org.bouncycastle:bcprov-jdk18on:1.84=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
org.bouncycastle:bcprov-jdk18on:1.85.2=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
org.eclipse.jetty.http2:http2-common:9.4.44.v20210927=testCompileClasspath,testRuntimeClasspath
org.eclipse.jetty.http2:http2-hpack:9.4.44.v20210927=testCompileClasspath,testRuntimeClasspath
org.eclipse.jetty.http2:http2-server:9.4.44.v20210927=testCompileClasspath,testRuntimeClasspath
Expand All @@ -60,7 +60,7 @@ org.eclipse.jetty:jetty-webapp:9.4.44.v20210927=testCompileClasspath,testRuntime
org.eclipse.jetty:jetty-xml:9.4.44.v20210927=testCompileClasspath,testRuntimeClasspath
org.hamcrest:hamcrest-core:2.2=testCompileClasspath,testRuntimeClasspath
org.hamcrest:hamcrest:2.2=testCompileClasspath,testRuntimeClasspath
org.jspecify:jspecify:1.0.0=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
org.jspecify:jspecify:1.0.1=compileClasspath,runtimeClasspath,testCompileClasspath,testRuntimeClasspath
org.junit.jupiter:junit-jupiter-api:5.7.2=testCompileClasspath,testRuntimeClasspath
org.junit.jupiter:junit-jupiter-engine:5.7.2=testRuntimeClasspath
org.junit.jupiter:junit-jupiter-params:5.7.2=testCompileClasspath,testRuntimeClasspath
Expand Down
Loading