From 33cfd37c4228abb7c04d2c3e46f994d5a7467330 Mon Sep 17 00:00:00 2001
From: Daniel Federschmidt <dfederschmidt@splunk.com>
Date: Fri, 8 Sep 2023 13:48:27 +0200
Subject: [PATCH 1/2] chore: force okio version and upgrade okhttp3 to latest
 stable release

---
 pom.xml | 8 +++++++-
 1 file changed, 7 insertions(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 2e6bb26..e72eda3 100644
--- a/pom.xml
+++ b/pom.xml
@@ -220,7 +220,13 @@
         <dependency>
             <groupId>com.squareup.okhttp3</groupId>
             <artifactId>okhttp</artifactId>
-            <version>4.9.3</version>
+            <version>4.11.0</version>
+        </dependency>
+        <dependency>
+            <!-- Force okio 3.5.0 until okhttp3 5.0.0 is released. Mitigates CVE-2023-3635 -->
+            <groupId>com.squareup.okio</groupId>
+            <artifactId>okio</artifactId>
+            <version>3.5.0</version>
         </dependency>
 
         <dependency>

From 4f16aa0c59f4e8d691e9979a18231a50bb300c90 Mon Sep 17 00:00:00 2001
From: Daniel Federschmidt <dfederschmidt@splunk.com>
Date: Fri, 8 Sep 2023 13:55:02 +0200
Subject: [PATCH 2/2] fix: exclude okio

---
 pom.xml | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pom.xml b/pom.xml
index e72eda3..a4b67c6 100644
--- a/pom.xml
+++ b/pom.xml
@@ -221,6 +221,12 @@
             <groupId>com.squareup.okhttp3</groupId>
             <artifactId>okhttp</artifactId>
             <version>4.11.0</version>
+            <exclusions>
+            <exclusion>
+                <artifactId>okio</artifactId>
+                <groupId>com.squareup.okio</groupId>
+            </exclusion>
+            </exclusions>
         </dependency>
         <dependency>
             <!-- Force okio 3.5.0 until okhttp3 5.0.0 is released. Mitigates CVE-2023-3635 -->