fix(deps): update dependency com.vonage:server-sdk to v9.14.0 (main) - autoclosed

[mend-for-github-com]

This PR contains the following updates:

Package	Change	Age	Adoption	Passing	Confidence
com.vonage:server-sdk	9.3.1 → 9.14.0

By merging this PR, the issue #123 will be automatically resolved and closed:

Severity	CVSS Score	Vulnerability	Reachability
Medium	5.3	CVE-2025-48924	Reachable

---

Release Notes

Vonage/vonage-java-sdk (com.vonage:server-sdk)

v9.14.0

• Auth: Added public RequestSigning.verifyRequestSignature(InputStream, String, Map, String, HashType) overload, so callers can verify signed callbacks (e.g. SMS) using a non-MD5 algorithm such as HMAC_SHA256. Previously the only publicly accessible overload was hardcoded to HashType.MD5 and the algorithm-aware overload was package-private. Existing overloads are unchanged and still default to MD5

v9.13.1

• SMS: Fixed trusted_recipient being serialized nested inside the sms settings object instead of at the top level of the message body, so SmsTextRequest.builder().trustedRecipient(...) now matches the Messages API contract (MMS and RCS were already correct). Removed the incorrectly placed trusted_recipient accessor from OutboundSettings; use SmsTextRequest.getTrustedRecipient() instead

v9.13.0

• Messages: Added WhatsApp business-scoped user ID (BSUID) support
  • Outbound WhatsApp messages can now be sent to a BSUID (or parent BSUID) in the to field, in addition to a phone number. The recipient is accepted as-is (phone numbers are normalised) and not validated against a client-side format, so values accepted by the API are never rejected by the SDK
  • Added shared WhatsappUser model (user_id, parent_user_id, wa_id)
  • InboundMessage: added whatsapp.sender via getWhatsappSender()
  • MessageStatus: added whatsapp.recipient via getWhatsappRecipient() and WhatsApp profile via getWhatsappProfile()
  • WhatsApp Profile: added getUsername()

v9.12.0

• Conversations: Removed trailing slashes from Conversations API request URIs to prevent routing errors after the API gateway stopped normalising trailing-slash paths

v9.11.0

• SMS: Increased client reference (client-ref) maximum length from 40 to 100 characters, matching the Messages API

v9.10.2

• HTTP: Fixed stale pooled connection reuse by adding connection TTL, idle/expired eviction and inactivity validation to reduce intermittent Connection reset errors when reusing long-lived VonageClient instances

v9.10.1

• No changes, had to create to trigger a rebuild due to build system problem

v9.10.0

• Exceptions: Added getRawRequest() and getRawResponse() methods to VonageApiResponseException for debugging API errors
• Messages: RCS TTL is now publicly settable on all RCS message types, with validation between 300 and 2592000 seconds

v9.9.0

• Video: Added post-call transcription options
• Video: Added connections list calls
• Verify v2: Added support for template_id parameter

v9.8.0

• Added deprecation notice for Java 8/1.8 users. Version 9.x will be the final version to support Java 8.
• Accounts: Internally switched to supporting only Basic Authorization header authentication
• Conversion: Internally switched to supporting only Basic Authorization header authentication
• Identity Insights: Added new API, covers Formatting, SimSwap, Original and Current Carrier checks
• Messages: Added trusted_recipient to SMS, MMS, and RCS
• Messages: Added support for Typing Indicators in WhatsApp
• Messages: Added pool_id support
• Number Insights: Internally switched to supporting only Basic Authorization header authentication
• Verify v1: Internally switched to supporting only Basic Authorization header authentication
• Verify: Deprecates the sandbox parameter
• Voice: Websocket Connections can now include custom authorization headers
• Voice: Answer Webhook adds support for SIP User-To-User incoming headers
• Voice: Add support for shaken signing on calls
• Voice: Added support for sip_code on incoming event webhooks
• Voice: Added support for Transfer NCCO action
• Voice: Added support for Wait NCCO action

v9.7.0

• Added native RCS message types (card, carousel) and suggestions support to eliminate need for custom message type

v9.6.0

• MMS caption length increased on 3000
• Added new RCS param for messages to set the category
• Added additional whatsapp information for deserializing incoming messages that contain pricing.

v9.5.0

• Added trusted-number to SMS

v9.4.2

• Added missing supported languages (Lithuanian and Marathi) to TextToSpeechLanguage enum

v9.4.1

• Fixed typo for verify to correct the call to next workflow

v9.4.0

• Added bidirectional flag for websockets to support the new Bi-Directional Audio Connector

---

• If you want to rebase/retry this PR, check this box