Explicit Kotlin version needs to be removed from Pulsar 4.0 or needs to be upgraded to 2.3.21

[adarshhm6]

Search before reporting

• I searched in the issues and found nothing similar.

Motivation

okio and kotlin version was explicitly added to mitigate the CVE's where these dependencies were brought by okhttp3.

<okio.version>3.16.3</okio.version>

<kotlin-stdlib.version>1.8.20</kotlin-stdlib.version>

Solution

Since okhttp3 is upgraded now to 5.3, explicit versions are necessary? Can it be removed? If not can we increase the kotlin version explicitly to 2.3.21?

Alternatives

No response

Anything else?

No response

Are you willing to submit a PR?

• I'm willing to submit a PR!