fix: bump nimbus-jose-jwt to 10.8 (#1358)

jbroma · web-flow · commit 60e6a1709e1b · 2026-03-05T14:37:50.000+01:00
diff --git a/.changeset/nimbus-jose-jwt-security.md b/.changeset/nimbus-jose-jwt-security.md
@@ -0,0 +1,5 @@
+---
+"@callstack/repack": patch
+---
+
+Bump the Android `nimbus-jose-jwt` dependency from `9.48` to `10.8` for upstream security fixes.
diff --git a/packages/repack/android/build.gradle b/packages/repack/android/build.gradle
@@ -196,5 +196,5 @@ dependencies {
     implementation 'com.facebook.react:react-android:+'
     implementation "com.squareup.okhttp3:okhttp:4.9.2"
     implementation "com.squareup.okhttp3:okhttp-urlconnection:4.9.2"
-    implementation 'com.nimbusds:nimbus-jose-jwt:9.48'
+    implementation 'com.nimbusds:nimbus-jose-jwt:10.8'
 }

-Original file line number
+Diff line change
@@ @@ -0,0 +1,5 @@ @@
 +---
 +"@callstack/repack": patch
 +---
++
 +Bump the Android `nimbus-jose-jwt` dependency from `9.48` to `10.8` for upstream security fixes.
Original file line number	Diff line number	Diff line change
`@@ -196,5 +196,5 @@ dependencies {`
`196`	`196`	`implementation 'com.facebook.react:react-android:+'`
`197`	`197`	`implementation "com.squareup.okhttp3:okhttp:4.9.2"`
`198`	`198`	`implementation "com.squareup.okhttp3:okhttp-urlconnection:4.9.2"`
`199`		`- implementation 'com.nimbusds:nimbus-jose-jwt:9.48'`
	`199`	`+ implementation 'com.nimbusds:nimbus-jose-jwt:10.8'`
`200`	`200`	`}`