This is an automated email from the ASF dual-hosted git repository.

slachiewicz pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/maven-archetype.git


The following commit(s) were added to refs/heads/master by this push:
     new 277afc19 Update jackson to 2.21.8
277afc19 is described below

commit 277afc19ad7b0fbf478414ef2ab2dbbf61df83a5
Author: Sylwester Lachiewicz <[email protected]>
AuthorDate: Thu Oct 29 23:37:13 2026 +0000

    Update jackson to 2.21.8
---
 pom.xml | 8 ++++++++
 1 file changed, 8 insertions(+)

diff --git a/pom.xml b/pom.xml
index 0a3b6990..a45ce355 100644
--- a/pom.xml
+++ b/pom.xml
@@ -89,6 +89,14 @@
         <type>pom</type>
         <scope>import</scope>
       </dependency>
+      <!-- groovy-yaml 4.0.33 brings in jackson 2.19.2, which has known 
vulnerabilities -->
+      <dependency>
+        <groupId>com.fasterxml.jackson</groupId>
+        <artifactId>jackson-bom</artifactId>
+        <version>2.21.8</version>
+        <type>pom</type>
+        <scope>import</scope>
+      </dependency>
       <dependency>
         <groupId>org.apache.maven.archetype</groupId>
         <artifactId>archetype-catalog</artifactId>

Reply via email to