Commit
This commit does not belong to any branch on this repository, and may belong to a fork outside of the repository.
Fix SNYK-JAVA-COMGOOGLEOAUTHCLIENT-575276, update google-api-client
Snyk rates this as a high-severity issue: https://app.snyk.io/vuln/SNYK-JAVA-COMGOOGLEOAUTHCLIENT-575276 > Remediation > Upgrade com.google.oauth-client:google-oauth-client to version 1.31.0 > or higher. Note that we had a prior PR in `play-googleauth` to fix this issue: #77 - but although it was titled "Update google-oauth-client to v1.31.0", that's at odds with the actual change in that PR, which only updated the library to v1.30.10: https://github.com/guardian/play-googleauth/blob/f8422fed4f244f13a653d1f98ecbf2cd538d2ebc/project/Dependencies.scala#L48 As far as SNYK-JAVA-COMGOOGLEOAUTHCLIENT-575276 goes, the commit for that was googleapis/google-oauth-java-client@13433cd7, which indeed was only initially released with v1.31.0.
- Loading branch information