chore(deps): Update dependency com.auth0:java-jwt to v4.6.2

[renovate]

This PR contains the following updates:

Package	Change	Age	Confidence
com.auth0:java-jwt	4.6.0 → 4.6.2

---

Release Notes

auth0/java-jwt (com.auth0:java-jwt)

v4.6.2

Compare Source

Full Changelog

Added

• Bump com.fasterxml.jackson.core:jackson-databind from 2.22.2 to 2.22.3 in /lib #​811 (dependabot[bot])
  Fixed
• Security Fix: Uncaught DateTimeException in java-jwt PayloadDeserializer.getInstantFromSeconds() commit (tanya732)

v4.6.1

Compare Source

Full Changelog

Added

• chore: update bouncycastle #​801 (tanya732)
• Bump com.fasterxml.jackson.core:jackson-core from 2.22.1 to 2.22.2 in /lib #​797 (dependabot[bot])
• chore: remove unused imports #​794 (Zichen1028)

---

Configuration

📅 Schedule: (in timezone Asia/Seoul)

• Branch creation
  • "before 10am on monday"
• Automerge
  • At any time (no schedule defined)

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

♻ Rebasing: Whenever PR is behind base branch, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about this update again.

---

• If you want to rebase/retry this PR, check this box

---

This PR was generated by Mend Renovate. View the repository job log.

[claude]

Claude finished @renovate[bot]'s task in 46s —— View job

---

🤖 Claude 의존성 영향도 분석

📦 변경점 요약

• com.auth0:java-jwt 4.6.0 → 4.6.2 (patch)

  PR 제목은 v4.6.1이나 실제 diff는 4.6.2로 반영됨 (Renovate가 4.6.2 출시 후 자동으로 브랜치를 최신 버전으로 갱신)

• 핵심 변경 내용 (4.6.1 기준, release notes):

  • bouncycastle 라이브러리 업데이트 (내부 암호화 의존성 보안 패치)
  • jackson-core 2.22.1 → 2.22.2 내부 범프 (transitive)
  • 내부 unused import 정리 (코드 정리, 동작 변화 없음)

• Transitive 의존성 변화: lockfile diff 없음 (transitive 변화 없거나 최소)

🎯 Q-Asker 영향도: 🟢 LOW

사용처:

• modules/auth/impl/.../component/JwtProvider.java — JWT, Algorithm.HMAC512, JWTVerificationException 사용. 토큰 서명(sign)·검증(verifyAndExtractUserId) 단일 진입점
• modules/auth/impl/.../filter/JwtTokenAuthenticationFilterTest.java — 테스트에서 JWT 픽스처 토큰 직접 생성 시 사용

예상 영향:

• 사용 중인 API(JWT.create(), JWT.require(), Algorithm.HMAC512(), JWTVerificationException)는 모두 안정 API로, 4.6.x 패치 범위 내 변경 없음
• bouncycastle 업데이트는 EC/RSA 계열 알고리즘에 영향하나 프로젝트는 HMAC512(대칭키) 사용 — bouncycastle 미사용 경로이므로 영향 없음
• jackson-core 내부 범프는 JSON 직렬화 동작에 영향 없음

✅ 권장 액션

• CI green 확인 (JUnit 테스트에 JwtTokenAuthenticationFilterTest 포함)
• 추가 로컬 검증 불필요 (패치 업데이트, 사용 API 변경 없음)

📋 참고

• Release Notes: PR 본문 참조
• 분석 모델: claude-sonnet-4-6

[renovate]

⚠️ Artifact update problem

Renovate failed to update an artifact related to this branch. You probably do not want to merge this PR as-is.

♻ Renovate will retry this branch, including artifacts, only when one of the following happens:

• any of the package files in this branch needs updating, or
• the branch becomes conflicted, or
• you click the rebase/retry checkbox if found above, or
• you rename this PR's title to start with "rebase!" to trigger it manually

The artifact failure details are included below:

File name: gradle/libs.versions.toml

Command failed: ./gradlew -Dorg.gradle.jvmargs=-Xms512m -Xmx512m --console=plain --dependency-verification lenient -q properties

FAILURE: Build failed with an exception.

* Where:
Build file '/tmp/renovate/repos/github/q-asker/api/build.gradle' line: 3

* What went wrong:
Plugin [id: 'com.vanniktech.dependency.graph.generator', version: '0.8.0'] was not found in any of the following sources:

- Gradle Core Plugins (plugin is not in 'org.gradle' namespace)
- Included Builds (No included builds contain this plugin)
- Plugin Repositories (could not resolve plugin artifact 'com.vanniktech.dependency.graph.generator:com.vanniktech.dependency.graph.generator.gradle.plugin:0.8.0')
  Searched in the following repositories:
    Gradle Central Plugin Repository

* Try:
> Run with --stacktrace option to get the stack trace.
> Run with --info or --debug option to get more log output.
> Run with --scan to get full insights.
> Get more help at https://help.gradle.org.

BUILD FAILED in 43s