Skip to content

Commit 89303ce

Browse files
committed
chore: upgrade Jackson
...to pull in a fix for this vuln: https://security.snyk.io/vuln/SNYK-JAVA-COMFASTERXMLJACKSONCORE-7569538 Also removing the explicit dependency for `jackson-annotations` as it is not needed.
1 parent ef73e17 commit 89303ce

2 files changed

Lines changed: 1 addition & 11 deletions

File tree

pom.xml

Lines changed: 1 addition & 7 deletions
Original file line numberDiff line numberDiff line change
@@ -38,8 +38,7 @@
3838
<version.maven.resources.plugin>3.1.0</version.maven.resources.plugin>
3939
<version.maven.site.plugin>3.7.1</version.maven.site.plugin>
4040
<version.maven.surefire.plugin>3.0.0-M3</version.maven.surefire.plugin>
41-
<jackson-annotations.version>2.13.4</jackson-annotations.version>
42-
<jackson-databind.version>2.13.4.2</jackson-databind.version>
41+
<jackson-databind.version>2.15.4</jackson-databind.version>
4342
</properties>
4443

4544
<build>
@@ -157,11 +156,6 @@
157156
<artifactId>jackson-databind</artifactId>
158157
<version>${jackson-databind.version}</version>
159158
</dependency>
160-
<dependency>
161-
<groupId>com.fasterxml.jackson.core</groupId>
162-
<artifactId>jackson-annotations</artifactId>
163-
<version>${jackson-annotations.version}</version>
164-
</dependency>
165159
<!-- Add a safe versions for SoS as overrides -->
166160
<dependency>
167161
<groupId>org.bouncycastle</groupId>

snyk-sdk/pom.xml

Lines changed: 0 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -21,10 +21,6 @@
2121
<artifactId>jsr305</artifactId>
2222
<scope>provided</scope>
2323
</dependency>
24-
<dependency>
25-
<groupId>com.fasterxml.jackson.core</groupId>
26-
<artifactId>jackson-annotations</artifactId>
27-
</dependency>
2824
<dependency>
2925
<groupId>com.fasterxml.jackson.core</groupId>
3026
<artifactId>jackson-databind</artifactId>

0 commit comments

Comments
 (0)