FSB-5668 update com.google.code.gson transitive dependency for versio…

…n update, used in converter-gson, update README for latest SDK version 2.2.18 (#104)
Bynder · Jul 7, 2023 · bf9abb6 · bf9abb6
1 parent dddb80b
commit bf9abb6
Show file tree

Hide file tree

Showing 2 changed files with 11 additions and 5 deletions.
diff --git a/README.md b/README.md
@@ -89,25 +89,25 @@ Observable<Response<Void>> shareCollection(CollectionShareQuery collectionShareQ
 
 ### Using latest release
 
-The most recent release is Bynder Java SDK 2.2.17.
+The most recent release is Bynder Java SDK 2.2.18.
 
-- API Docs: http://www.javadoc.io/doc/com.bynder/bynder-java-sdk/2.2.17
+- API Docs: http://www.javadoc.io/doc/com.bynder/bynder-java-sdk/2.2.18
 
 To add a dependency on the SDK using Maven, use the following:
 
 ```xml
 <dependency>
   <groupId>com.bynder</groupId>
   <artifactId>bynder-java-sdk</artifactId>
-  <version>2.2.17</version>
+  <version>2.2.18</version>
 </dependency>
 ```
 
 To add a dependency using Gradle:
 
 ```
 dependencies {
-  implementation 'com.bynder:bynder-java-sdk:2.2.17'
+  implementation 'com.bynder:bynder-java-sdk:2.2.18'
 }
 ```
 

diff --git a/pom.xml b/pom.xml
@@ -7,7 +7,7 @@
 
     <groupId>com.bynder</groupId>
     <artifactId>bynder-java-sdk</artifactId>
-    <version>2.2.17</version>
+    <version>2.2.18</version>
     <packaging>jar</packaging>
 
     <name>Bynder Java SDK</name>
@@ -73,6 +73,12 @@
             <artifactId>converter-gson</artifactId>
             <version>2.9.0</version>
         </dependency>
+        <!-- override com.google.code.gson version for security issue used in converter-gson, nearest definition -->
+        <dependency>
+            <groupId>com.google.code.gson</groupId>
+            <artifactId>gson</artifactId>
+            <version>2.10.1</version>
+        </dependency>
         <dependency>
             <groupId>com.squareup.retrofit2</groupId>
             <artifactId>retrofit</artifactId>