Skip to content

* Fix Jackson vuln#154

Merged
ag-ramachandran merged 1 commit intomasterfrom
users/ramacg/chore/FixCVE-GHSA-72hv-8253-57qq
Mar 2, 2026
Merged

* Fix Jackson vuln#154
ag-ramachandran merged 1 commit intomasterfrom
users/ramacg/chore/FixCVE-GHSA-72hv-8253-57qq

Conversation

@ag-ramachandran
Copy link
Copy Markdown
Contributor

This pull request updates dependency management in pom.xml to improve compatibility and resolve potential conflicts, particularly around Jackson libraries. The most important changes are grouped below.

Dependency version updates and conflict resolution:

  • Updated the project version from 5.2.0 to 5.2.1 to reflect these changes.
  • Introduced a new property jackson.version set to 2.21.1 for consistent Jackson dependency management.
  • Excluded jackson-core and jackson-datatype-jsr310 from a transitive dependency to prevent version conflicts.
  • Added explicit dependencies for jackson-core and jackson-datatype-jsr310 at the specified version to ensure consistent usage throughout the project.

@ag-ramachandran ag-ramachandran merged commit 678b213 into master Mar 2, 2026
4 checks passed
@ag-ramachandran ag-ramachandran deleted the users/ramacg/chore/FixCVE-GHSA-72hv-8253-57qq branch March 2, 2026 16:15
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant