Skip to content

Consider adding dependency convergence detection #13990

Open
@sjohnr

Description

@sjohnr

We should consider adding dependency convergence detection to our build to prevent issues like gh-13843. For example, the following dependencies must agree on the version of com.nimbusds:nimbus-jose-jwt.

  • spring-security-oauth2-client -> com.nimbusds:oauth2-oidc-sdk -> com.nimbusds:nimbus-jose-jwt
  • spring-security-oauth2-jose -> com.nimbusds:nimbus-jose-jwt

See comment and related issue for more information.

Metadata

Metadata

Assignees

No one assigned

    Labels

    Type

    No type

    Projects

    No projects

    Milestone

    No milestone

    Relationships

    None yet

    Development

    No branches or pull requests

    Issue actions