From d82d7834adf5177041f48054a126f864e59bd1fb Mon Sep 17 00:00:00 2001 From: Poovamraj T T Date: Wed, 11 Jan 2023 17:50:32 +0100 Subject: [PATCH] Release 1.44.2 (#499) --- CHANGELOG.md | 9 +++++++++ README.md | 9 +++++++-- 2 files changed, 16 insertions(+), 2 deletions(-) diff --git a/CHANGELOG.md b/CHANGELOG.md index ca4490df..05b8db04 100644 --- a/CHANGELOG.md +++ b/CHANGELOG.md @@ -1,5 +1,14 @@ # Change Log +## [1.44.2](https://github.com/auth0/auth0-java/tree/1.44.2) (2023-01-11) +[Full Changelog](https://github.com/auth0/auth0-java/compare/1.44.1...1.44.2) + +This patch release does not contain any functional changes, but is being released using an updated signing key for verification as part of our commitment to best security practices. +Please review [the README note for additional details.](https://github.com/auth0/auth0-java/blob/master/README.md) + +**Security** +- Bump java-jwt dependency to 3.19.4 [\#498](https://github.com/auth0/auth0-java/pull/498) ([jimmyjames](https://github.com/jimmyjames)) + ## [1.44.1](https://github.com/auth0/auth0-java/tree/1.44.1) (2022-10-25) [Full Changelog](https://github.com/auth0/auth0-java/compare/1.44.0...1.44.1) diff --git a/README.md b/README.md index 0aee8acc..b3dbde8c 100644 --- a/README.md +++ b/README.md @@ -1,3 +1,8 @@ +> **Note** +> As part of our ongoing commitment to best security practices, we have rotated the signing keys used to sign previous releases of this SDK. As a result, new patch builds have been released using the new signing key. Please upgrade at your earliest convenience. +> +> While this change won't affect most developers, if you have implemented a dependency signature validation step in your build process, you may notice a warning that past releases can't be verified. This is expected, and a result of the key rotation process. Updating to the latest version will resolve this for you. + ![A Java client library for the Auth0 Authentication and Management APIs.](https://cdn.auth0.com/website/sdks/banners/auth0-java-banner.png) [![CircleCI](https://img.shields.io/circleci/project/github/auth0/auth0-java.svg?style=flat-square)](https://circleci.com/gh/auth0/auth0-java/tree/master) @@ -28,14 +33,14 @@ Add the dependency via Maven: com.auth0 auth0 - 1.44.1 + 1.44.2 ``` or Gradle: ```gradle -implementation 'com.auth0:auth0:1.44.1' +implementation 'com.auth0:auth0:1.44.2' ``` ### Configure the SDK