[ 
https://issues.apache.org/jira/browse/BEAM-9162?focusedWorklogId=390806&page=com.atlassian.jira.plugin.system.issuetabpanels:worklog-tabpanel#worklog-390806
 ]

ASF GitHub Bot logged work on BEAM-9162:
----------------------------------------

                Author: ASF GitHub Bot
            Created on: 21/Feb/20 17:33
            Start Date: 21/Feb/20 17:33
    Worklog Time Spent: 10m 
      Work Description: suztomo commented on issue #10643: [BEAM-9162] Upgrade 
Jackson to version 2.10.2
URL: https://github.com/apache/beam/pull/10643#issuecomment-589755192
 
 
   Regarding the output of Linkage Checker, the conflict from optional 
dependencies shouldn't cause the problem. The checker is conservative to find 
many errors even in optional or provided dependencies.
 
----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
 
For queries about this service, please contact Infrastructure at:
us...@infra.apache.org


Issue Time Tracking
-------------------

    Worklog Id:     (was: 390806)
    Time Spent: 4h 40m  (was: 4.5h)

> Upgrade Jackson to version 2.10.2
> ---------------------------------
>
>                 Key: BEAM-9162
>                 URL: https://issues.apache.org/jira/browse/BEAM-9162
>             Project: Beam
>          Issue Type: Improvement
>          Components: build-system, sdk-java-core
>            Reporter: Ismaël Mejía
>            Assignee: Ismaël Mejía
>            Priority: Minor
>             Fix For: 2.20.0
>
>          Time Spent: 4h 40m
>  Remaining Estimate: 0h
>
> Jackson has a new way to deal with [deserialization security 
> issues|https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.10] in 
> 2.10.x so worth the upgrade.



--
This message was sent by Atlassian Jira
(v8.3.4#803005)

Reply via email to