Bump okhttp to 4.12.0 (#1317)

Needed to fix CVE https://nvd.nist.gov/vuln/detail/CVE-2023-3635
kamon-io · Mar 1, 2024 · 43bc5fa · 43bc5fa
1 parent d362be3
commit 43bc5fa
Show file tree

Hide file tree

Showing 2 changed files with 2 additions and 2 deletions.
diff --git a/build.sbt b/build.sbt
@@ -630,7 +630,7 @@ lazy val `kamon-okhttp` = (project in file("instrumentation/kamon-okhttp"))
   .settings(
     libraryDependencies ++= Seq(
       kanelaAgent % "provided",
-      "com.squareup.okhttp3"      % "okhttp"                    % "4.10.0" % "provided",
+      "com.squareup.okhttp3"      % "okhttp"                    % "4.12.0" % "provided",
 
       scalatest % "test",
       logbackClassic % "test",

diff --git a/project/Build.scala b/project/Build.scala
@@ -32,7 +32,7 @@ object BaseProject extends AutoPlugin {
     val logbackClassic    = "ch.qos.logback"        %  "logback-classic" % "1.2.12"
     val scalatest         = "org.scalatest"         %% "scalatest"       % "3.2.9"
     val hdrHistogram      = "org.hdrhistogram"      %  "HdrHistogram"    % "2.1.10"
-    val okHttp            = "com.squareup.okhttp3"  %  "okhttp"          % "4.10.0"
+    val okHttp            = "com.squareup.okhttp3"  %  "okhttp"          % "4.12.0"
     val okHttpMockServer  = "com.squareup.okhttp3"  %  "mockwebserver"   % "4.10.0"
     val jsqlparser        = "com.github.jsqlparser" % "jsqlparser"       % "4.1"
     val oshiCore          = "com.github.oshi"       %  "oshi-core"       % "5.7.5"