This is an automated email from the ASF dual-hosted git repository.
potiuk pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/airflow.git
The following commit(s) were added to refs/heads/main by this push:
new ff48a4381a8 Bump the java-sdk-security-updates group across 1
directory with 3 updates (#71602)
ff48a4381a8 is described below
commit ff48a4381a8d468a66e113ddda41c752513b86b2
Author: Dependabot [bot] <49699333+dependabot[bot]@users.noreply.github.com>
AuthorDate: Fri Aug 14 17:31:38 2026 +0200
Bump the java-sdk-security-updates group across 1 directory with 3 updates
(#71602)
Bumps the java-sdk-security-updates group with 2 updates in the /java-sdk
directory:
[com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core)
and
[com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson).
Updates `org.apache.logging.log4j:log4j-api` from 2.26.0 to 2.26.1
Updates `com.fasterxml.jackson.core:jackson-core` from 2.21.1 to 2.21.4
-
[Commits](https://github.com/FasterXML/jackson-core/compare/jackson-core-2.21.1...jackson-core-2.21.4)
Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.0 to 2.21.5
- [Commits](https://github.com/FasterXML/jackson/commits)
---
updated-dependencies:
- dependency-name: org.apache.logging.log4j:log4j-api
dependency-version: 2.26.1
dependency-type: direct:production
dependency-group: java-sdk-security-updates
- dependency-name: com.fasterxml.jackson.core:jackson-core
dependency-version: 2.21.4
dependency-type: direct:production
dependency-group: java-sdk-security-updates
- dependency-name: com.fasterxml.jackson.core:jackson-databind
dependency-version: 2.21.5
dependency-type: direct:production
dependency-group: java-sdk-security-updates
...
Signed-off-by: dependabot[bot] <[email protected]>
Co-authored-by: dependabot[bot]
<49699333+dependabot[bot]@users.noreply.github.com>
---
java-sdk/gradle/verification-metadata.xml | 99 +++++++++++++++++++++++++++++--
java-sdk/log4j2/build.gradle.kts | 8 +--
java-sdk/sdk/build.gradle.kts | 4 +-
3 files changed, 100 insertions(+), 11 deletions(-)
diff --git a/java-sdk/gradle/verification-metadata.xml
b/java-sdk/gradle/verification-metadata.xml
index cf23bdeb255..81099a30146 100644
--- a/java-sdk/gradle/verification-metadata.xml
+++ b/java-sdk/gradle/verification-metadata.xml
@@ -22,12 +22,8 @@
<verify-metadata>true</verify-metadata>
<verify-signatures>false</verify-signatures>
<trusted-artifacts>
- <!-- Sources and Javadoc jars are resolved on demand by IDEs, never
by the
- build, so they are not reproducible inputs and pinning them
would make
- an IDE import fail for any component whose sources nobody
happened to
- download while regenerating this file. -->
- <trust file=".*-sources[.]jar" regex="true"/>
<trust file=".*-javadoc[.]jar" regex="true"/>
+ <trust file=".*-sources[.]jar" regex="true"/>
</trusted-artifacts>
</configuration>
<components>
@@ -176,6 +172,16 @@
<sha256
value="60d4eb66a000a33fa37e7cb51e2550dabe7467a0b8ac60806d7d3ba9728ccd64"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="com.fasterxml.jackson" name="jackson-base"
version="2.21.4">
+ <artifact name="jackson-base-2.21.4.pom">
+ <sha256
value="91e9c95e0ced7356bfa6e28297f2c1e2acdae67306713fa945aa5245c0d0fef5"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
+ <component group="com.fasterxml.jackson" name="jackson-base"
version="2.21.5">
+ <artifact name="jackson-base-2.21.5.pom">
+ <sha256
value="4f4e2bea00ffe575f5ec054c07a4fbc34c1955d8635c01a3e88013bf2c71deff"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="com.fasterxml.jackson" name="jackson-bom"
version="2.15.3">
<artifact name="jackson-bom-2.15.3.pom">
<sha256
value="66fc9945c16716bc202f4b9d7e6d969df3f509feffbe1acf1a31511b753d5c9d"
origin="Generated by Gradle"/>
@@ -206,6 +212,16 @@
<sha256
value="8d7c78dde10f4d08e7296cef084cf30b77adcea7a36e23d1520793fdec63ff28"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="com.fasterxml.jackson" name="jackson-bom"
version="2.21.4">
+ <artifact name="jackson-bom-2.21.4.pom">
+ <sha256
value="52a50e69686abd4489c962db4c15f30ee5cc7732849de6301845e4660db1a0b7"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
+ <component group="com.fasterxml.jackson" name="jackson-bom"
version="2.21.5">
+ <artifact name="jackson-bom-2.21.5.pom">
+ <sha256
value="57fe22dec659de0655357fad0582ef7c8b2fe5a8906a6f1ff1bcbbd1e4554846"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="com.fasterxml.jackson" name="jackson-parent"
version="2.15">
<artifact name="jackson-parent-2.15.pom">
<sha256
value="6cdf97bc66f389f63e36850d2f552d1216688f8e5a58727d3f6a98edf8675cde"
origin="Generated by Gradle"/>
@@ -279,6 +295,19 @@
<sha256
value="84feace60a4c78e3737f9d39950879e87deb7eb870ecfe949a32450b957782fd"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="com.fasterxml.jackson.core" name="jackson-core"
version="2.21.4">
+ <artifact name="jackson-core-2.21.4.module">
+ <sha256
value="7c7fdd52c770a877e206021ae965b4ce2b1b2bc236617f808467b9d6535672b7"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
+ <component group="com.fasterxml.jackson.core" name="jackson-core"
version="2.21.5">
+ <artifact name="jackson-core-2.21.5.jar">
+ <sha256
value="b64b5874162b503a0e58a8f7758266e8dd9f91bf49e3a59ae0b5f47589a231b7"
origin="Generated by Gradle"/>
+ </artifact>
+ <artifact name="jackson-core-2.21.5.module">
+ <sha256
value="de113f4531def50feb12be04e7074a8f76f5f3ef290cf886b90086a4e274530f"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="com.fasterxml.jackson.core" name="jackson-databind"
version="2.15.3">
<artifact name="jackson-databind-2.15.3.jar">
<sha256
value="c3c53333a2172a80678bda1803e39cff45bec6ae3e9c7d4f44a81ec4e2ab18dc"
origin="Generated by Gradle"/>
@@ -308,6 +337,14 @@
<sha256
value="37a2c70e3b9774dc86aa59d06a6427e5de759ee380e66d952be34b22c7b9b5b3"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="com.fasterxml.jackson.core" name="jackson-databind"
version="2.21.5">
+ <artifact name="jackson-databind-2.21.5.jar">
+ <sha256
value="507418c0fafd38b2b2cfb704521630da613a8e4cc8381195a6f418017883e2c0"
origin="Generated by Gradle"/>
+ </artifact>
+ <artifact name="jackson-databind-2.21.5.module">
+ <sha256
value="920e2a0211a31f54d2e7e4effdc580d02c3412a6fefdb632a8054e60c4758381"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="com.fasterxml.jackson.dataformat"
name="jackson-dataformat-xml" version="2.15.3">
<artifact name="jackson-dataformat-xml-2.15.3.jar">
<sha256
value="39a34531dca5fca75eb547663c300855c968c8faca6861d92eca9e9747af0416"
origin="Generated by Gradle"/>
@@ -345,6 +382,14 @@
<sha256
value="6cd8b5c83903437c5c6ecc542272cc2bf159539d7ca704f13141331614728859"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="com.fasterxml.jackson.dataformat"
name="jackson-dataformat-yaml" version="2.21.5">
+ <artifact name="jackson-dataformat-yaml-2.21.5.jar">
+ <sha256
value="c26143ac5503fd545bd5e9063f45a2499be89971559875e47cc868ef9359d10b"
origin="Generated by Gradle"/>
+ </artifact>
+ <artifact name="jackson-dataformat-yaml-2.21.5.module">
+ <sha256
value="bedd2e30b08b53e97b645c44820eabe0bc3485dc1e121ccaf28455362a1b5fba"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="com.fasterxml.jackson.dataformat"
name="jackson-dataformats-text" version="2.17.2">
<artifact name="jackson-dataformats-text-2.17.2.pom">
<sha256
value="e698323330a9a82c920e5a89b65b0f7225c8e733c122a18f796a04a6e31fa5cb"
origin="Generated by Gradle"/>
@@ -360,6 +405,11 @@
<sha256
value="fc4be9dbe39b6de16e397f0e4f6eeddce81963053896cfead5c5c66e1bf1ff0d"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="com.fasterxml.jackson.dataformat"
name="jackson-dataformats-text" version="2.21.5">
+ <artifact name="jackson-dataformats-text-2.21.5.pom">
+ <sha256
value="4b41f2978371c00dc3a19a3c3b9cb5b48a1d6a417f1c7a3fd383b33c33107911"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="com.fasterxml.jackson.datatype"
name="jackson-datatype-jsr310" version="2.21.0">
<artifact name="jackson-datatype-jsr310-2.21.0.module">
<sha256
value="b66152719680ec47dedd7136775c5bf2048b08016e4467fb036762fb425a40d0"
origin="Generated by Gradle"/>
@@ -373,6 +423,14 @@
<sha256
value="825f4855dd549d8fcb6d2ea93d977a91d05f8c5fbbd3157f3f43fd2328bb761e"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="com.fasterxml.jackson.datatype"
name="jackson-datatype-jsr310" version="2.21.5">
+ <artifact name="jackson-datatype-jsr310-2.21.5.jar">
+ <sha256
value="e941f9718d16a649614cb06711de06da34722afff9cee0b7725fc5318638304c"
origin="Generated by Gradle"/>
+ </artifact>
+ <artifact name="jackson-datatype-jsr310-2.21.5.module">
+ <sha256
value="b0791f61190514af3366600a4740c49a923ac3c7e23dc8590bdc35d70c15e4ac"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="com.fasterxml.jackson.module"
name="jackson-module-kotlin" version="2.15.3">
<artifact name="jackson-module-kotlin-2.15.3.jar">
<sha256
value="8f72e6b99e6145e3284a5224355ca8ee6030afa8c1d6a3395b530d29026f8d52"
origin="Generated by Gradle"/>
@@ -399,6 +457,11 @@
<sha256
value="80dfdc6f2f76fa4c065e11dc74531a02447245f1415b3a1270281ffcd8c92b5a"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="com.fasterxml.jackson.module"
name="jackson-modules-java8" version="2.21.5">
+ <artifact name="jackson-modules-java8-2.21.5.pom">
+ <sha256
value="381838b5f1e9fa99c82756abebc0ccd20bc7d93750117ce9d16c4a750e1e66c5"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="com.fasterxml.woodstox" name="woodstox-core"
version="6.5.1">
<artifact name="woodstox-core-6.5.1.jar">
<sha256
value="c928d60665c6415fb1c39775cf95cfc44f7f4580cf5ab01b1c380ebffd76887f"
origin="Generated by Gradle"/>
@@ -1328,6 +1391,11 @@
<sha256
value="e5fab1fdd146db8980cee0dd1383f5faf8a7926606fac8bdaa9bfef17c98d5c4"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="org.apache.logging.log4j" name="log4j"
version="2.26.1">
+ <artifact name="log4j-2.26.1.pom">
+ <sha256
value="ea4705725fd94bf5debe2911d4ea7af20898603f68354e64b2461a0f249e445d"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="org.apache.logging.log4j" name="log4j-api"
version="2.25.1">
<artifact name="log4j-api-2.25.1.jar">
<sha256
value="20b9c77c0a9e54d1063a39e551dcaf98c7d8e7a4994648f84d0b9e14c71f7215"
origin="Generated by Gradle"/>
@@ -1344,6 +1412,14 @@
<sha256
value="a124f0264f630a45fb6f419f4614742978b5b51728f09e6403035f1d63dc4c21"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="org.apache.logging.log4j" name="log4j-api"
version="2.26.1">
+ <artifact name="log4j-api-2.26.1.jar">
+ <sha256
value="f1810a4704ccce019d02bba029dc02a4f2ac0c997f647b465e7d409c1927f822"
origin="Generated by Gradle"/>
+ </artifact>
+ <artifact name="log4j-api-2.26.1.module">
+ <sha256
value="5ed93f6fb5334bf7ee52943d1a654bc3a1f3f10765ae2fd4bbd387333be6678a"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="org.apache.logging.log4j" name="log4j-bom"
version="2.25.1">
<artifact name="log4j-bom-2.25.1.pom">
<sha256
value="b8ac2332849711b2f7474415937bdbb967d2b9300ef4cffe3f35be3b1aa18a4e"
origin="Generated by Gradle"/>
@@ -1354,6 +1430,11 @@
<sha256
value="d4af18d02dcefc657f5a497f339c14b9fde554686c7c81c5f8072be165db7578"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="org.apache.logging.log4j" name="log4j-bom"
version="2.26.1">
+ <artifact name="log4j-bom-2.26.1.pom">
+ <sha256
value="4415ad189dd04db54958a43e23b37cc397a1edee9e888214b8bd47fbe819072e"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="org.apache.logging.log4j" name="log4j-core"
version="2.25.1">
<artifact name="log4j-core-2.25.1.jar">
<sha256
value="78c232747855464b182f0abf78a99a22c88d4d270ff585343dab55576d7420e2"
origin="Generated by Gradle"/>
@@ -1370,6 +1451,14 @@
<sha256
value="97d280e183012dd898810a7176a238127b67c82517ec2bd45c23c41ce07990bb"
origin="Generated by Gradle"/>
</artifact>
</component>
+ <component group="org.apache.logging.log4j" name="log4j-core"
version="2.26.1">
+ <artifact name="log4j-core-2.26.1.jar">
+ <sha256
value="2ec8c3bf5a6d7c89be8620116a2fc973f7dda1ad0261ad393c4d4726edfd3dcb"
origin="Generated by Gradle"/>
+ </artifact>
+ <artifact name="log4j-core-2.26.1.module">
+ <sha256
value="03bfd8adbe306ac46001ec9de668f8e5d24f6659f212fc64e62a1b672a5a2f6a"
origin="Generated by Gradle"/>
+ </artifact>
+ </component>
<component group="org.apache.maven" name="maven-api-annotations"
version="4.0.0-rc-3">
<artifact name="maven-api-annotations-4.0.0-rc-3.jar">
<sha256
value="5d3490f72ad3a7e82be88b27629f37c59fd2531bae511c3b13866420d5d862bd"
origin="Generated by Gradle"/>
diff --git a/java-sdk/log4j2/build.gradle.kts b/java-sdk/log4j2/build.gradle.kts
index 9149377167e..071f08ca92f 100644
--- a/java-sdk/log4j2/build.gradle.kts
+++ b/java-sdk/log4j2/build.gradle.kts
@@ -30,15 +30,15 @@ val mockkVersion: String by project
// runtime when it's unnecessary.
@Suppress("GradleDependencyAddedMultipleTimes")
dependencies {
- annotationProcessor("org.apache.logging.log4j:log4j-core:2.26.0")
- api("org.apache.logging.log4j:log4j-api:2.26.0")
- compileOnly("org.apache.logging.log4j:log4j-core:2.26.0")
+ annotationProcessor("org.apache.logging.log4j:log4j-core:2.26.1")
+ api("org.apache.logging.log4j:log4j-api:2.26.1")
+ compileOnly("org.apache.logging.log4j:log4j-core:2.26.1")
implementation(project(":sdk"))
testImplementation(kotlin("test"))
testImplementation("io.mockk:mockk:$mockkVersion")
testImplementation("io.mockk:mockk-agent:$mockkVersion")
- testImplementation("org.apache.logging.log4j:log4j-core:2.26.0")
+ testImplementation("org.apache.logging.log4j:log4j-core:2.26.1")
}
java {
diff --git a/java-sdk/sdk/build.gradle.kts b/java-sdk/sdk/build.gradle.kts
index 79dd9340d21..e7d86056992 100644
--- a/java-sdk/sdk/build.gradle.kts
+++ b/java-sdk/sdk/build.gradle.kts
@@ -47,8 +47,8 @@ dependencies {
compileOnly("javax.annotation:javax.annotation-api:1.3.2")
implementation("com.fasterxml.jackson.core:jackson-annotations:2.21")
- implementation("com.fasterxml.jackson.core:jackson-core:2.21.1")
- implementation("com.fasterxml.jackson.core:jackson-databind:2.21.0")
+ implementation("com.fasterxml.jackson.core:jackson-core:2.21.4")
+ implementation("com.fasterxml.jackson.core:jackson-databind:2.21.5")
implementation("com.fasterxml.jackson.dataformat:jackson-dataformat-yaml:2.21.0")
implementation("com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.21.0")
implementation("com.xenomachina:kotlin-argparser:2.0.7")
