FSB-5668 update com.google.code.gson transitive dependency for versio…

…n update, used in converter-gson, update README for latest SDK version 2.2.18 (#104)
Bynder · Jul 7, 2023 · bf9abb6 · bf9abb6
1 parent dddb80b
commit bf9abb6
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 5 deletions.
diff --git a/README.md b/README.md
@@ -89,25 +89,25 @@ Observable<Response<Void>> shareCollection(CollectionShareQuery collectionShareQ
 
 ### Using latest release
 
-The most recent release is Bynder Java SDK 2.2.17.
+The most recent release is Bynder Java SDK 2.2.18.
 
-- API Docs: http://www.javadoc.io/doc/com.bynder/bynder-java-sdk/2.2.17
+- API Docs: http://www.javadoc.io/doc/com.bynder/bynder-java-sdk/2.2.18
 
 To add a dependency on the SDK using Maven, use the following:
 
 ```xml
 <dependency>
  <groupId>com.bynder</groupId>
  <artifactId>bynder-java-sdk</artifactId>
- <version>2.2.17</version>
+ <version>2.2.18</version>
 </dependency>
 ```
 
 To add a dependency using Gradle:
 
 ```
 dependencies {
- implementation 'com.bynder:bynder-java-sdk:2.2.17'
+ implementation 'com.bynder:bynder-java-sdk:2.2.18'
 }
 ```
 

diff --git a/pom.xml b/pom.xml
@@ -7,7 +7,7 @@
 
  <groupId>com.bynder</groupId>
  <artifactId>bynder-java-sdk</artifactId>
- <version>2.2.17</version>
+ <version>2.2.18</version>
  <packaging>jar</packaging>
 
  <name>Bynder Java SDK</name>
@@ -73,6 +73,12 @@
  <artifactId>converter-gson</artifactId>
  <version>2.9.0</version>
  </dependency>
+ <!-- override com.google.code.gson version for security issue used in converter-gson, nearest definition -->
+ <dependency>
+ <groupId>com.google.code.gson</groupId>
+ <artifactId>gson</artifactId>
+ <version>2.10.1</version>
+ </dependency>
  <dependency>
  <groupId>com.squareup.retrofit2</groupId>
  <artifactId>retrofit</artifactId>