Dependency resolution broken...

[Martin Burchard]

During my regular checks for new versions, I was informed about the new version 7.3 of com.nimbusds:oauth2-oidc-sdk.

But after changing to this version, an old version of net.minidev:json-smart is used.

As you can see in the picture, Gradle resolves com.nimbusds:nimbus-jose-jwt:8.8 and not com.nimbusds:nimbus-jose-jwt:[8.2,) -> 8.14.1

I have not used a force version yet...

    implementation 'javax.inject:javax.inject:1',
            'com.google.code.findbugs:jsr305:3.0.2',
            'org.springframework.boot:spring-boot-starter-web',
            'org.springframework.boot:spring-boot-starter-security',
            "com.microsoft.azure:msal4j:${microsoftAzureMSAL4J}",
            'com.nimbusds:oauth2-oidc-sdk:6.23',
            "org.apache.commons:commons-text:${commonsTextVersion}",
            'com.microsoft.graph:microsoft-graph:1.7.1'

Version 6.23 works, 7.3 not…

[Yavor Vasilev]

Restored JSON Smart dep range in 7.4:

version 7.4 (2020-04-20)
    * Updates JAR support in AuthorizationRequest and AuthenticationRequest to
      draft-ietf-oauth-jwsreq-21.
    * Restored dep range net.minidev:json-smart:[1.3.1,2.3]
    * Bumps to com.nimbusds:nimbus-jose-jwt:8.14.1
    * Bumps optional OpenSAML dep to 3.4.5