Implement #5257: deprecate URL-taking read methods (#5258)

Author: cowtowncoder

release-notes/VERSION-2.x

@@ -12,6 +12,7 @@ Not yet released
  (reported by @nlisker)
 #5242: Support "binary vectors": `@JsonFormat(shape = Shape.BINARY)` for
   `float[]`, `double[]`
+#5257: Deprecate `URL`-taking `readValue()` methods in `ObjectMapper`, `ObjectReader`
 
 2.20.0-rc1 (04-Aug-2025)
 

src/main/java/com/fasterxml/jackson/databind/ObjectMapper.java

@@ -1297,12 +1297,15 @@ public JsonParser createParser(File src) throws IOException {
 
     /**
      * Factory method for constructing properly initialized {@link JsonParser}
-     * to read content from specified {@link File}.
+     * to read content from specified {@link URL}.
      * Parser is not managed (or "owned") by ObjectMapper: caller is responsible
      * for properly closing it once content reading is complete.
      *
      * @since 2.11
+     *
+     * @deprecated since 2.20 deprecated as it calls {@link JsonFactory#createParser(URL)}.
      */
+    @Deprecated // @since 2.20
     public JsonParser createParser(URL src) throws IOException {
         _assertNotNull("src", src);
         return _deserializationConfig.initialize(_jsonFactory.createParser(src));
@@ -3346,11 +3349,14 @@ public JsonNode readTree(File file) throws IOException
      * passed-in {@link URL}.
      *<p>
      * NOTE: handling of {@link java.net.URL} is delegated to
-     * {@link JsonFactory#createParser(java.net.URL)} and usually simply
+     * {@link JsonFactory#createParser(URL)} and usually simply
      * calls {@link java.net.URL#openStream()}, meaning no special handling
      * is done. If different HTTP connection options are needed you will need
      * to create {@link java.io.InputStream} separately.
+     *
+     * @deprecated since 2.20 deprecated as it calls {@link JsonFactory#createParser(URL)}.
      */
+    @Deprecated // @since 2.20
     public JsonNode readTree(URL source) throws IOException
     {
         _assertNotNull("source", source);
@@ -3817,29 +3823,40 @@ public <T> T readValue(File src, JavaType valueType)
      *    of type {@link JsonParser} supports (JSON for default case)
      * @throws DatabindException if the input JSON structure does not match structure
      *   expected for result type (or has other mismatch issues)
+     *
+     * @deprecated since 2.20 deprecated as it calls {@link JsonFactory#createParser(URL)}.
      */
+    @Deprecated // @since 2.20
     @SuppressWarnings("unchecked")
     public <T> T readValue(URL src, Class<T> valueType)
         throws IOException, StreamReadException, DatabindException
     {
         _assertNotNull("src", src);
-        return (T) _readMapAndClose(_jsonFactory.createParser(src), _typeFactory.constructType(valueType));
+        return (T) _readMapAndClose(_jsonFactory.createParser(src),
+                _typeFactory.constructType(valueType));
     }
 
     /**
      * Same as {@link #readValue(java.net.URL, Class)} except that target specified by {@link TypeReference}.
+     *
+     * @deprecated since 2.20 deprecated as it calls {@link JsonFactory#createParser(URL)}.
      */
+    @Deprecated // @since 2.20
     @SuppressWarnings({ "unchecked" })
     public <T> T readValue(URL src, TypeReference<T> valueTypeRef)
         throws IOException, StreamReadException, DatabindException
     {
         _assertNotNull("src", src);
-        return (T) _readMapAndClose(_jsonFactory.createParser(src), _typeFactory.constructType(valueTypeRef));
+        return (T) _readMapAndClose(_jsonFactory.createParser(src),
+                _typeFactory.constructType(valueTypeRef));
     }
 
     /**
      * Same as {@link #readValue(java.net.URL, Class)} except that target specified by {@link JavaType}.
+     *
+     * @deprecated since 2.20 deprecated as it calls {@link JsonFactory#createParser(URL)}.
      */
+    @Deprecated // @since 2.20
     @SuppressWarnings("unchecked")
     public <T> T readValue(URL src, JavaType valueType)
         throws IOException, StreamReadException, DatabindException

src/main/java/com/fasterxml/jackson/databind/ObjectReader.java

@@ -1103,7 +1103,10 @@ public JsonParser createParser(File src) throws IOException {
      * for properly closing it once content reading is complete.
      *
      * @since 2.11
+     *
+     * @deprecated since 2.20 deprecated as it calls {@link JsonFactory#createParser(URL)}.
      */
+    @Deprecated // @since 2.20
     public JsonParser createParser(URL src) throws IOException {
         _assertNotNull("src", src);
         return _config.initialize(_parserFactory.createParser(src), _schema);
@@ -1699,7 +1702,10 @@ public <T> T readValue(File src, Class<T> valueType) throws IOException
      * calls {@link java.net.URL#openStream()}, meaning no special handling
      * is done. If different HTTP connection options are needed you will need
      * to create {@link java.io.InputStream} separately.
+     *
+     * @deprecated since 2.20 deprecated as it calls {@link JsonFactory#createParser(URL)}.
      */
+    @Deprecated // @since 2.20
     @SuppressWarnings("unchecked")
     public <T> T readValue(URL src) throws IOException
     {
@@ -1717,7 +1723,10 @@ public <T> T readValue(URL src) throws IOException
      * @param valueType Target type to bind content to
      *
      * @since 2.11
+     *
+     * @deprecated since 2.20 deprecated as it calls {@link JsonFactory#createParser(URL)}.
      */
+    @Deprecated // @since 2.20
     @SuppressWarnings("unchecked")
     public <T> T readValue(URL src, Class<T> valueType) throws IOException
     {
@@ -2008,7 +2017,10 @@ public <T> MappingIterator<T> readValues(File src) throws IOException
      * to create {@link java.io.InputStream} separately.
      *
      * @param src URL to read to access JSON content to parse.
+     *
+     * @deprecated since 2.20 deprecated as it calls {@link JsonFactory#createParser(URL)}.
      */
+    @Deprecated // @since 2.20
     public <T> MappingIterator<T> readValues(URL src) throws IOException
     {
         if (_dataFormatReaders != null) {