update nimbus-jose-jwt (#1002)

Author: vladislav-sidorovich

dumper/app/build.gradle

@@ -68,10 +68,13 @@ dependencies {
         exclude group: "ch.qos.reload4j", module: "reload4j"
         exclude group: "org.slf4j", module: "slf4j-reload4j"
     }
+    //Overrides for hadoop-common transient deps
     implementation libs.commons.beanutils // explicit version for vulnerabilities update
     implementation libs.jetty.server // explicit version for vulnerabilities update
     implementation libs.netty.handler // explicit version for vulnerabilities update
     implementation libs.dnsjava // explicit version for vulnerabilities update
+    implementation libs.nimbus.jose.jwt // explicit version for vulnerabilities update
+
     implementation libs.hadoop.hdfs.client
     implementation(libs.harawata.appdirs) {
         exclude group: "net.java.dev.jna", module: "jna"

dumper/app/gradle.lockfile

@@ -95,7 +95,7 @@ com.google.re2j:re2j:1.1=compileClasspath,testCompileClasspath
 com.google.re2j:re2j:1.7=runtimeClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
 com.googlecode.json-simple:json-simple:1.1.1=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
 com.jcraft:jsch:0.1.55=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
-com.nimbusds:nimbus-jose-jwt:9.31=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
+com.nimbusds:nimbus-jose-jwt:9.37.4=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
 com.sun.jersey:jersey-core:1.19.4=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
 com.sun.jersey:jersey-server:1.19.4=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath
 com.sun.jersey:jersey-servlet:1.19.4=compileClasspath,runtimeClasspath,testCompileClasspath,testFixturesRuntimeClasspath,testRuntimeClasspath

dumper/lib-ext-hive-metastore/build.gradle

@@ -53,12 +53,15 @@ dependencies {
     hive312RuntimeOnly libs.hive.service
     hive312RuntimeOnly libs.hive.metastore
     hive312RuntimeOnly libs.hive.jdbc
-    hive312RuntimeOnly libs.hadoop.common
     hive312RuntimeOnly libs.logback.classic
     hive312RuntimeOnly libs.jcl.over.slf4j
+    hive312RuntimeOnly libs.hadoop.common
+
+    //Overrides for hadoop-common transient deps
     hive312RuntimeOnly libs.commons.beanutils // explicit version for vulnerabilities update
     hive312RuntimeOnly libs.netty.handler // explicit version for vulnerabilities update
     hive312RuntimeOnly libs.dnsjava // explicit version for vulnerabilities update
+    hive312RuntimeOnly libs.nimbus.jose.jwt // explicit version for vulnerabilities update
 
     // For HiveServer2
     hive312RuntimeOnly libs.tez.common

dumper/lib-ext-hive-metastore/gradle.lockfile

@@ -47,7 +47,7 @@ com.jcraft:jsch:0.1.55=hive312RuntimeClasspath
 com.jolbox:bonecp:0.8.0.RELEASE=hive312RuntimeClasspath
 com.lmax:disruptor:3.3.6=hive312RuntimeClasspath
 com.microsoft.sqlserver:mssql-jdbc:6.2.1.jre7=hive312RuntimeClasspath
-com.nimbusds:nimbus-jose-jwt:9.31=hive312RuntimeClasspath
+com.nimbusds:nimbus-jose-jwt:9.37.4=hive312RuntimeClasspath
 com.ning:async-http-client:1.8.16=hive312RuntimeClasspath
 com.sun.jersey.contribs:jersey-guice:1.19=hive312RuntimeClasspath
 com.sun.jersey:jersey-client:1.19=hive312RuntimeClasspath

gradle/libs.versions.toml

@@ -75,6 +75,7 @@ commons-beanutils = "1.11.0"
 jetty-server = "9.4.58.v20250814"
 netty-handler = "4.1.127.Final"
 dnsjava = "3.6.3"
+nimbus-jose-jwt = "9.37.4"
 
 [libraries]
 apache-avro = { module = "org.apache.avro:avro", version.ref = "apache-avro" }
@@ -106,6 +107,7 @@ gradle-license-report = { module = "com.github.jk1:gradle-license-report", versi
 guava = { module = "com.google.guava:guava", version.ref = "guava" }
 hadoop-auth = { module = "org.apache.hadoop:hadoop-auth", version.ref = "hadoop"}
 hadoop-common = { module = "org.apache.hadoop:hadoop-common", version.ref = "hadoop" }
+nimbus-jose-jwt = { module = "com.nimbusds:nimbus-jose-jwt", version.ref = "nimbus-jose-jwt" }
 dnsjava = { module = "dnsjava:dnsjava", version.ref = "dnsjava" }
 commons-beanutils = { module = "commons-beanutils:commons-beanutils", version.ref = "commons-beanutils" }
 jetty-server = { module = "org.eclipse.jetty:jetty-server", version.ref = "jetty-server" }