Skip to content

Commit b3165dd

Browse files
authored
Release 0.21.3 (#167)
1 parent 307a0c2 commit b3165dd

File tree

2 files changed

+19
-2
lines changed

2 files changed

+19
-2
lines changed

CHANGELOG.md

+12
Original file line numberDiff line numberDiff line change
@@ -1,5 +1,17 @@
11
# Change Log
22

3+
## [0.21.3](https://github.com/auth0/jwks-rsa-java/tree/0.21.3) (2023-01-11)
4+
[Full Changelog](https://github.com/auth0/jwks-rsa-java/compare/0.21.2...0.21.3)
5+
6+
This patch release uses an updated signing key for verification as part of our commitment to best security practices.
7+
Please review [the README note for additional details.](https://github.com/auth0/jwks-rsa-java/blob/master/README.md)
8+
9+
**Security**
10+
- Bump `jackson-databind` dependency to 2.13.4.2 [\#162](https://github.com/auth0/jwks-rsa-java/pull/162) ([evansims](https://github.com/evansims))
11+
12+
**Changed**
13+
- Update Gradle wrapper to 6.9.2 [\#156](https://github.com/auth0/jwks-rsa-java/pull/156) ([jimmyjames](https://github.com/jimmyjames))
14+
315
## [0.21.2](https://github.com/auth0/jwks-rsa-java/tree/0.21.2) (2022-09-15)
416
[Full Changelog](https://github.com/auth0/jwks-rsa-java/compare/0.21.1...0.21.2)
517

README.md

+7-2
Original file line numberDiff line numberDiff line change
@@ -6,6 +6,11 @@
66
[![Maven Central](https://img.shields.io/maven-central/v/com.auth0/jwks-rsa.svg?style=flat-square)](https://search.maven.org/#search%7Cga%7C1%7Cg%3A%20com.auth0%20a%3Ajwks-rsa)
77
[![javadoc](https://javadoc.io/badge2/com.auth0/jwks-rsa-java/javadoc.svg)](https://javadoc.io/doc/com.auth0/jwks-rsa)
88

9+
> **Note**
10+
> As part of our ongoing commitment to best security practices, we have rotated the signing keys used to sign previous releases of this SDK. As a result, new patch builds have been released using the new signing key. Please upgrade at your earliest convenience.
11+
>
12+
> While this change won't affect most developers, if you have implemented a dependency signature validation step in your build process, you may notice a warning that past releases can't be verified. This is expected, and a result of the key rotation process. Updating to the latest version will resolve this for you.
13+
914
:books: [Documentation](#documentation) - :rocket: [Getting Started](#getting-started) - :computer: [API Reference](#api-reference) :speech_balloon: [Feedback](#feedback)
1015

1116
## Documentation
@@ -26,14 +31,14 @@ Add the dependency via Maven:
2631
<dependency>
2732
<groupId>com.auth0</groupId>
2833
<artifactId>jwks-rsa</artifactId>
29-
<version>0.21.2</version>
34+
<version>0.21.3</version>
3035
</dependency>
3136
```
3237

3338
or Gradle:
3439

3540
```gradle
36-
implementation 'com.auth0:jwks-rsa:0.21.2'
41+
implementation 'com.auth0:jwks-rsa:0.21.3'
3742
```
3843

3944
### Usage

0 commit comments

Comments
 (0)