Comment From: nor-ek

@jzheaux Hi, as I can see there is currently com.nimbusds:oauth2-oidc-sdk:9.15 in spring-security-dependencies.gradle. I see there is new version 9.18 up here: https://search.maven.org/artifact/com.nimbusds/oauth2-oidc-sdk/9.18/jar .

Comment From: jzheaux

Thanks, @nor-ek. I think this may be a stray ticket as 5.3.x moved to use dependency constraints and the code was automatically updated to oauth2-oidc-sdk:6.18.1 when released.

As for 9.18, yes, I believe that our existing dependency management process will take care of this in the next milestone.