This is an automated email from the ASF dual-hosted git repository.
yesamer pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/incubator-kie-drools.git
The following commit(s) were added to refs/heads/main by this push:
new 21e7d61bb8d NO-ISSUE Upgrading jackson-databind to 2.22.1 and override
jackson-databind to 2.22.1 in optaplanner-build-parent to fix CVE (#6815)
21e7d61bb8d is described below
commit 21e7d61bb8dff19748e2ae2c17c990a38efdc98f
Author: athirakm94 <[email protected]>
AuthorDate: Fri Jul 17 18:30:43 2026 +0530
NO-ISSUE Upgrading jackson-databind to 2.22.1 and override jackson-databind
to 2.22.1 in optaplanner-build-parent to fix CVE (#6815)
* upgrading jackson-databind to 2.22.1
* upgrading Jackson versions to 2.22.1
* upgrade micrometer-core from 1.14.7 to 1.16.6 in OptaPlanner modules
* Revert "upgrade micrometer-core from 1.14.7 to 1.16.6 in OptaPlanner
modules"
This reverts commit dc64abeb0a217c29f8b2fe4b7c06e3c7e083fdcb.
* upgrading jackson-databind to 2.22.1 in optaplanner-build-parent
---
kie-parent/pom.xml | 8 ++++----
optaplanner-build/optaplanner-build-parent/pom.xml | 6 ++----
2 files changed, 6 insertions(+), 8 deletions(-)
diff --git a/kie-parent/pom.xml b/kie-parent/pom.xml
index 3c1cb4f02f0..d00abf548a8 100644
--- a/kie-parent/pom.xml
+++ b/kie-parent/pom.xml
@@ -87,10 +87,10 @@
<version.build.helper.maven.plugin>3.4.0</version.build.helper.maven.plugin>
<version.ch.obermuhlner>2.0.1</version.ch.obermuhlner>
<version.ch.qos.logback>1.5.35</version.ch.qos.logback>
- <version.com.fasterxml.jackson>2.21.2</version.com.fasterxml.jackson>
-
<version.com.fasterxml.jackson.annotations>2.21</version.com.fasterxml.jackson.annotations>
-
<version.com.fasterxml.jackson.databind>2.22.0</version.com.fasterxml.jackson.databind>
-
<version.com.fasterxml.jackson.datatype>2.21.2</version.com.fasterxml.jackson.datatype>
+ <version.com.fasterxml.jackson>2.22.1</version.com.fasterxml.jackson>
+
<version.com.fasterxml.jackson.annotations>2.22</version.com.fasterxml.jackson.annotations>
+
<version.com.fasterxml.jackson.databind>2.22.1</version.com.fasterxml.jackson.databind>
+
<version.com.fasterxml.jackson.datatype>2.22.1</version.com.fasterxml.jackson.datatype>
<version.com.github.docker-java>3.7.1</version.com.github.docker-java><!--
align with testcontainers ABI; Quarkus BOM pins older docker-java missing
ImageHistoryCmd -->
<version.com.github.eirslett>1.15.1</version.com.github.eirslett>
<version.com.github.haifengl.smile>1.5.2</version.com.github.haifengl.smile>
diff --git a/optaplanner-build/optaplanner-build-parent/pom.xml
b/optaplanner-build/optaplanner-build-parent/pom.xml
index a9a85cb52c3..70d90b87ff5 100644
--- a/optaplanner-build/optaplanner-build-parent/pom.xml
+++ b/optaplanner-build/optaplanner-build-parent/pom.xml
@@ -60,8 +60,7 @@
<version.org.slf4j>2.0.17</version.org.slf4j><!-- TODO keep in sync with
quarkus-bom -->
<version.org.springframework>7.0.8</version.org.springframework>
<version.org.springframework.boot>4.0.7</version.org.springframework.boot>
-
<version.com.fasterxml.jackson.databind>2.22.0</version.com.fasterxml.jackson.databind>
-
+
<version.com.fasterxml.jackson.databind>2.22.1</version.com.fasterxml.jackson.databind>
<!--
************************************************************************ -->
<!-- Plugins -->
<!--
************************************************************************ -->
@@ -219,14 +218,13 @@
<artifactId>spring-boot-persistence</artifactId>
<version>${version.org.springframework.boot}</version>
</dependency>
- <!-- Override quarkus-bom jackson-databind version; transitively
imported by
+ <!-- Override quarkus-bom jackson-databind version; transitively imported by
optaplanner-persistence-jackson,
optaplanner-spring-boot-autoconfigure and optaplanner-quarkus-jackson -->
<dependency>
<groupId>com.fasterxml.jackson.core</groupId>
<artifactId>jackson-databind</artifactId>
<version>${version.com.fasterxml.jackson.databind}</version>
</dependency>
-
</dependencies>
</dependencyManagement>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
