From b725d85cab98d6751e8454b41e77cae6d84eb6d9 Mon Sep 17 00:00:00 2001
From: Ivar Derksen <ivar.derksen@sidn.nl>
Date: Wed, 20 Mar 2024 14:36:58 +0100
Subject: [PATCH] Chore: bump vulnerable dependencies

---
 build.gradle                          | 21 +++++++++++----------
 settings.gradle                       |  5 +++++
 src/main/resources/config.sample.json |  2 +-
 3 files changed, 17 insertions(+), 11 deletions(-)

diff --git a/build.gradle b/build.gradle
index 4f3c94a..23241ab 100644
--- a/build.gradle
+++ b/build.gradle
@@ -30,21 +30,22 @@ repositories {
 }
 
 dependencies {
-    implementation 'org.glassfish.jersey.core:jersey-server:3.0.0'
-    implementation 'org.glassfish.jersey.containers:jersey-container-servlet:3.0.0'
-    implementation 'org.glassfish.jersey.inject:jersey-hk2:3.0.0'
+    implementation 'org.glassfish.jersey.core:jersey-server:3.0.12'
+    implementation 'org.glassfish.jersey.containers:jersey-container-servlet:3.0.12'
+    implementation 'org.glassfish.jersey.inject:jersey-hk2:3.0.12'
     implementation 'org.slf4j:slf4j-simple:1.7.25'
-    implementation 'com.jcraft:jsch:0.1.53'
+    implementation 'com.jcraft:jsch:0.1.55'
     implementation 'jakarta.ws.rs:jakarta.ws.rs-api:3.1.0'
     implementation 'com.googlecode.libphonenumber:libphonenumber:8.9.10'
 
-    implementation 'io.jsonwebtoken:jjwt:0.9.1'
-    implementation 'com.google.code.gson:gson:2.8.9'
-    implementation 'org.apache.commons:commons-lang3:3.7'
-    implementation 'org.bouncycastle:bcpkix-jdk15on:1.70'
-    implementation 'org.bouncycastle:bcprov-jdk15on:1.67'
+    implementation 'io.jsonwebtoken:jjwt:0.12.5'
+    implementation 'com.google.code.gson:gson:2.10.1'
+    implementation 'org.apache.commons:commons-lang3:3.14.0'
+    implementation 'org.bouncycastle:bcpkix-jdk18on:1.77'
+    implementation 'org.bouncycastle:bcprov-jdk18on:1.77'
 
-    implementation 'org.irmacard.api:irma_api_common:2.0.0'
+    // Source dependencies. Check settings.gradle for the source repositories.
+    implementation 'org.irmacard.api:irma_api_common:v2.0.1'
 
     testImplementation group: 'junit', name: 'junit', version: '4.12'
 }
diff --git a/settings.gradle b/settings.gradle
index 4b6065f..b6525c7 100644
--- a/settings.gradle
+++ b/settings.gradle
@@ -1,2 +1,7 @@
 rootProject.name = 'irma_sms_issuer'
 
+sourceControl {
+    gitRepository("https://github.com/privacybydesign/irma_api_common.git") {
+        producesModule("org.irmacard.api:irma_api_common")
+    }
+}
diff --git a/src/main/resources/config.sample.json b/src/main/resources/config.sample.json
index a8a9a0e..e0beca4 100644
--- a/src/main/resources/config.sample.json
+++ b/src/main/resources/config.sample.json
@@ -15,7 +15,7 @@
     "nl": "Yivi verificatecode: %s\nOf direct via een link:\nhttps://privacybydesign.foundation/uitgifte/telefoonnummer#!verify:%s",
     "en": "Yivi verification code: %s\nOr directly via a URL:\nhttps://privacybydesign.foundation/issuance/phonenumber#!verify:%s"
   },
-  "private_key_path": "sk.pem",
+  "private_key_path": "sk.der",
   "server_name": "irma_sms_issuer",
   "human_readable_name": "Yivi",
   "scheme_manager": "irma-demo",