From bf9abb61cfdf8cf2817aa4e9f29a746f1131f2d0 Mon Sep 17 00:00:00 2001
From: ahongbynder <61435567+ahongbynder@users.noreply.github.com>
Date: Fri, 7 Jul 2023 10:00:41 -0700
Subject: [PATCH] FSB-5668 update com.google.code.gson transitive dependency
 for version update, used in converter-gson, update README for latest SDK
 version 2.2.18 (#104)

---
 README.md | 8 ++++----
 pom.xml   | 8 +++++++-
 2 files changed, 11 insertions(+), 5 deletions(-)

diff --git a/README.md b/README.md
index 5695082..074aa48 100644
--- a/README.md
+++ b/README.md
@@ -89,9 +89,9 @@ Observable<Response<Void>> shareCollection(CollectionShareQuery collectionShareQ
 
 ### Using latest release
 
-The most recent release is Bynder Java SDK 2.2.17.
+The most recent release is Bynder Java SDK 2.2.18.
 
-- API Docs: http://www.javadoc.io/doc/com.bynder/bynder-java-sdk/2.2.17
+- API Docs: http://www.javadoc.io/doc/com.bynder/bynder-java-sdk/2.2.18
 
 To add a dependency on the SDK using Maven, use the following:
 
@@ -99,7 +99,7 @@ To add a dependency on the SDK using Maven, use the following:
 <dependency>
   <groupId>com.bynder</groupId>
   <artifactId>bynder-java-sdk</artifactId>
-  <version>2.2.17</version>
+  <version>2.2.18</version>
 </dependency>
 ```
 
@@ -107,7 +107,7 @@ To add a dependency using Gradle:
 
 ```
 dependencies {
-  implementation 'com.bynder:bynder-java-sdk:2.2.17'
+  implementation 'com.bynder:bynder-java-sdk:2.2.18'
 }
 ```
 
diff --git a/pom.xml b/pom.xml
index 8fd4fc2..7a089d5 100644
--- a/pom.xml
+++ b/pom.xml
@@ -7,7 +7,7 @@
 
     <groupId>com.bynder</groupId>
     <artifactId>bynder-java-sdk</artifactId>
-    <version>2.2.17</version>
+    <version>2.2.18</version>
     <packaging>jar</packaging>
 
     <name>Bynder Java SDK</name>
@@ -73,6 +73,12 @@
             <artifactId>converter-gson</artifactId>
             <version>2.9.0</version>
         </dependency>
+        <!-- override com.google.code.gson version for security issue used in converter-gson, nearest definition -->
+        <dependency>
+            <groupId>com.google.code.gson</groupId>
+            <artifactId>gson</artifactId>
+            <version>2.10.1</version>
+        </dependency>
         <dependency>
             <groupId>com.squareup.retrofit2</groupId>
             <artifactId>retrofit</artifactId>