From 27839147f0c0c73e04c85457b7adb2b748569a8a Mon Sep 17 00:00:00 2001
From: Alan Zimmer <48699787+alzimmermsft@users.noreply.github.com>
Date: Mon, 3 Apr 2023 12:22:02 -0400
Subject: [PATCH] Downgrade nimbus-jose-jwt in azure-security-attestation while
 upgrade issues are resolved (#34305)

---
 eng/versioning/external_dependencies.txt           | 3 +++
 sdk/attestation/azure-security-attestation/pom.xml | 4 ++--
 2 files changed, 5 insertions(+), 2 deletions(-)

diff --git a/eng/versioning/external_dependencies.txt b/eng/versioning/external_dependencies.txt
index 9831b222f582a..ed0633de3cd1e 100644
--- a/eng/versioning/external_dependencies.txt
+++ b/eng/versioning/external_dependencies.txt
@@ -324,6 +324,9 @@ org.testcontainers:junit-jupiter;1.17.6
 # sdk\keyvault\microsoft-azure-keyvault-test\pom.xml
 test_jar_com.microsoft.azure:azure-mgmt-resources;1.3.1-SNAPSHOT
 
+# sdk\attestation\azure-security-attestation
+attestation_com.nimbusds:nimbus-jose-jwt;9.22
+
 # everything under sdk\cosmos
 cosmos_com.fasterxml.jackson.module:jackson-module-afterburner;2.13.5
 cosmos_com.google.guava:guava;30.1.1-jre
diff --git a/sdk/attestation/azure-security-attestation/pom.xml b/sdk/attestation/azure-security-attestation/pom.xml
index d6bcbd13c743e..82ca288080e6b 100644
--- a/sdk/attestation/azure-security-attestation/pom.xml
+++ b/sdk/attestation/azure-security-attestation/pom.xml
@@ -50,7 +50,7 @@
     <dependency>
       <groupId>com.nimbusds</groupId>
       <artifactId>nimbus-jose-jwt</artifactId>
-      <version>9.31</version> <!-- {x-version-update;com.nimbusds:nimbus-jose-jwt;external_dependency} -->
+      <version>9.22</version> <!-- {x-version-update;attestation_com.nimbusds:nimbus-jose-jwt;external_dependency} -->
     </dependency>
     <!-- Added this dependency to include necessary annotations used by reactor core.
     Without this dependency, java throws a warning about the GuardedBy attribute. -->
@@ -148,7 +148,7 @@
           <rules>
             <bannedDependencies>
               <includes>
-                <include>com.nimbusds:nimbus-jose-jwt:[9.31]</include> <!-- {x-include-update;com.nimbusds:nimbus-jose-jwt;external_dependency} -->
+                <include>com.nimbusds:nimbus-jose-jwt:[9.22]</include> <!-- {x-include-update;attestation_com.nimbusds:nimbus-jose-jwt;external_dependency} -->
                 <include>io.opentelemetry:opentelemetry-api:[1.23.0]</include> <!-- {x-include-update;io.opentelemetry:opentelemetry-api;external_dependency} -->
                 <include>io.opentelemetry:opentelemetry-sdk:[1.23.0]</include> <!-- {x-include-update;io.opentelemetry:opentelemetry-sdk;external_dependency} -->
                 <include>io.opentelemetry:opentelemetry-exporter-logging:[1.23.0]</include> <!-- {x-include-update;io.opentelemetry:opentelemetry-exporter-logging;external_dependency} -->