From 1fa374c102b222beda3cbb2021e59ce3841a777c Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 30 Sep 2025 11:00:10 +0000 Subject: [PATCH 1/3] Bump com.nimbusds:oauth2-oidc-sdk in /plugins/repository-azure Bumps [com.nimbusds:oauth2-oidc-sdk](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions) from 11.28 to 11.29.1. - [Changelog](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/src/master/CHANGELOG.txt) - [Commits](https://bitbucket.org/connect2id/oauth-2.0-sdk-with-openid-connect-extensions/branches/compare/11.29.1..11.28) --- updated-dependencies: - dependency-name: com.nimbusds:oauth2-oidc-sdk dependency-version: 11.29.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] --- plugins/repository-azure/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/plugins/repository-azure/build.gradle b/plugins/repository-azure/build.gradle index b172351aa5e57..96266f4d5db85 100644 --- a/plugins/repository-azure/build.gradle +++ b/plugins/repository-azure/build.gradle @@ -62,7 +62,7 @@ dependencies { api 'com.microsoft.azure:msal4j-persistence-extension:1.3.0' api "net.java.dev.jna:jna-platform:${versions.jna}" api 'com.microsoft.azure:msal4j:1.21.0' - api 'com.nimbusds:oauth2-oidc-sdk:11.28' + api 'com.nimbusds:oauth2-oidc-sdk:11.29.2' api 'com.nimbusds:nimbus-jose-jwt:10.5' api 'com.nimbusds:content-type:2.3' api 'com.nimbusds:lang-tag:1.7' From 018c95c1a127a7dace91190d19e62effbbd62acc Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 30 Sep 2025 11:02:33 +0000 Subject: [PATCH 2/3] Updating SHAs Signed-off-by: dependabot[bot] --- plugins/repository-azure/licenses/oauth2-oidc-sdk-11.28.jar.sha1 | 1 - .../repository-azure/licenses/oauth2-oidc-sdk-11.29.2.jar.sha1 | 1 + 2 files changed, 1 insertion(+), 1 deletion(-) delete mode 100644 plugins/repository-azure/licenses/oauth2-oidc-sdk-11.28.jar.sha1 create mode 100644 plugins/repository-azure/licenses/oauth2-oidc-sdk-11.29.2.jar.sha1 diff --git a/plugins/repository-azure/licenses/oauth2-oidc-sdk-11.28.jar.sha1 b/plugins/repository-azure/licenses/oauth2-oidc-sdk-11.28.jar.sha1 deleted file mode 100644 index 1ed834ac0f15d..0000000000000 --- a/plugins/repository-azure/licenses/oauth2-oidc-sdk-11.28.jar.sha1 +++ /dev/null @@ -1 +0,0 @@ -93d00492ca749f94f56b29b6b764cefe44d51c77 \ No newline at end of file diff --git a/plugins/repository-azure/licenses/oauth2-oidc-sdk-11.29.2.jar.sha1 b/plugins/repository-azure/licenses/oauth2-oidc-sdk-11.29.2.jar.sha1 new file mode 100644 index 0000000000000..d004c7c617bb8 --- /dev/null +++ b/plugins/repository-azure/licenses/oauth2-oidc-sdk-11.29.2.jar.sha1 @@ -0,0 +1 @@ +42059580697a62274fed4e6348d27abafec4e3e9 \ No newline at end of file From a5b5774fcd54f33310130cf9ee92cd6604b50ecb Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 30 Sep 2025 11:03:27 +0000 Subject: [PATCH 3/3] Update changelog Signed-off-by: dependabot[bot] --- CHANGELOG.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index 066cb56f67ce0..3ab7362365ab0 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -118,7 +118,7 @@ The format is based on [Keep a Changelog](https://keepachangelog.com/en/1.0.0/), - Bump `actions/setup-java` from 4 to 5 ([#19143](https://github.com/opensearch-project/OpenSearch/pull/19143)) - Bump `com.google.code.gson:gson` from 2.13.1 to 2.13.2 ([#19290](https://github.com/opensearch-project/OpenSearch/pull/19290)) ([#19293](https://github.com/opensearch-project/OpenSearch/pull/19293)) - Bump `actions/stale` from 9 to 10 ([#19292](https://github.com/opensearch-project/OpenSearch/pull/19292)) -- Bump `com.nimbusds:oauth2-oidc-sdk` from 11.25 to 11.28 ([#19291](https://github.com/opensearch-project/OpenSearch/pull/19291)) +- Bump `com.nimbusds:oauth2-oidc-sdk` from 11.25 to 11.29.1 ([#19291](https://github.com/opensearch-project/OpenSearch/pull/19291), [#19462](https://github.com/opensearch-project/OpenSearch/pull/19462)) - Bump Apache Lucene from 10.2.2 to 10.3.0 ([#19296](https://github.com/opensearch-project/OpenSearch/pull/19296)) - Add com.google.code.gson:gson to the gradle version catalog ([#19328](https://github.com/opensearch-project/OpenSearch/pull/19328)) - Bump `org.apache.logging.log4j:log4j-core` from 2.25.1 to 2.25.2 ([#19360](https://github.com/opensearch-project/OpenSearch/pull/19360))