Releasing version 5.9.3

launchdarkly · Jul 28, 2022 · 9364f98 · 9364f98
1 parent 534a61d
commit 9364f98
Show file tree

Hide file tree

Showing 3 changed files with 6 additions and 2 deletions.
diff --git a/CHANGELOG.md b/CHANGELOG.md
@@ -2,6 +2,10 @@
 
 All notable changes to the LaunchDarkly Java SDK will be documented in this file. This project adheres to [Semantic Versioning](http://semver.org).
 
+## [5.9.3] - 2022-07-28
+### Changed:
+- Updated `okhttp` dependency to version 4.9.3 to address a [reported vulnerability](https://security.snyk.io/vuln/SNYK-JAVA-COMSQUAREUPOKHTTP3-2958044) in earlier versions of that library, which could have allowed potentially sensitive information to be written to the log if you had put that information in a custom header value that contained an illegal character (see release notes for Java SDK [5.6.0](https://github.com/launchdarkly/java-server-sdk/releases/tag/5.6.0)). ([#271](https://github.com/launchdarkly/java-server-sdk/issues/271))
+
 ## [5.9.2] - 2022-07-20
 ### Changed:
 - Further optimizations to reduce how many short-lived objects the SDK produces as a side effect of flag evaluations, causing less work for the garbage collector in applications that evaluate flags very frequently.

diff --git a/gradle.properties b/gradle.properties
@@ -1,4 +1,4 @@
-version=5.9.2
+version=5.9.3
 # The following empty ossrh properties are used by LaunchDarkly's internal integration testing framework
 # and should not be needed for typical development purposes (including by third-party developers).
 ossrhUsername=

diff --git a/src/main/java/com/launchdarkly/sdk/server/Version.java b/src/main/java/com/launchdarkly/sdk/server/Version.java
@@ -4,5 +4,5 @@ abstract class Version {
   private Version() {}
 
   // This constant is updated automatically by our Gradle script during a release, if the project version has changed
-  static final String SDK_VERSION = "5.9.2";
+  static final String SDK_VERSION = "5.9.3";
 }