[DRILL-8334] Upgrade to okhttp 4.10.0 due to CVEs in kotlin transitive dependencies - ASF JIRA

XML

Word

Printable

JSON

Details

Type: Improvement
Status: Open
Priority: Major
Resolution: Unresolved
Affects Version/s: None
Fix Version/s: None
Component/s: None
Labels:
None

Description

https://mvnrepository.com/artifact/com.squareup.okhttp3/okhttp

It's a fairly minot bump from 4.9.3 to 4.10.0

okhttp 4.10.0 uses a newer copy of kotlin-stdlib that doesn't have CVEs

Attachments

Activity

People

Assignee:: Unassigned

Reporter:: PJ Fanning

Votes:: 0 Vote for this issue

Watchers:: 2 Start watching this issue

Dates

Created:: 14/Oct/22 11:47

Updated:: 09/May/23 15:01