Use jackson bom and update jackson 20.2 (#1720)

Resolve #1710
Resolve #1709

The version update failed because jackson-annotation no longer specifies
patch versions. Instead, we will use jackson-bom and stop specifying
individual versions.


FasterXML/jackson-annotations#307 (comment)

Author: eucyt

gradle/libraries.versions.toml

@@ -1,7 +1,7 @@
 [versions]
 retrofit2 = "3.0.0"
 jjwt = "0.13.0"
-jackson = "2.19.2"
+jackson = "2.20.0"
 assertj = "3.27.4"
 junit = "5.13.4"
 junitPlatformLauncher = "1.13.4"
@@ -21,10 +21,11 @@ logback = { module = "ch.qos.logback:logback-classic", version = "1.5.18" }
 okhttp3 = { module = "com.squareup.okhttp3:okhttp", version.ref = "okhttp3" }
 okhttp3-logging-interceptor = { module = "com.squareup.okhttp3:logging-interceptor", version.ref = "okhttp3" }
 
-jackson-databind = { module = "com.fasterxml.jackson.core:jackson-databind", version.ref = "jackson" }
-jackson-annotations = { module = "com.fasterxml.jackson.core:jackson-annotations", version.ref = "jackson" }
-jackson-datatype-jsr310 = { module = "com.fasterxml.jackson.datatype:jackson-datatype-jsr310", version.ref = "jackson" }
-jackson-module-parameter-names = { module = "com.fasterxml.jackson.module:jackson-module-parameter-names", version.ref = "jackson" }
+jackson-bom = { module = "com.fasterxml.jackson:jackson-bom", version.ref = "jackson" }
+
+jackson-databind = { module = "com.fasterxml.jackson.core:jackson-databind" }
+jackson-annotations = { module = "com.fasterxml.jackson.core:jackson-annotations" }
+jackson-datatype-jsr310 = { module = "com.fasterxml.jackson.datatype:jackson-datatype-jsr310" }
 
 findbugs-jsr305 = { module = "com.google.code.findbugs:jsr305", version = "3.0.2" }
 

line-bot-integration-test/src/integrationTest/java/com/linecorp/bot/client/utils/IntegrationTestSettingsLoader.java

@@ -35,7 +35,7 @@ public static IntegrationTestSettings load() throws IOException {
                 .isNotNull();
 
         IntegrationTestSettings settings = new ObjectMapper(new YAMLFactory())
-                .readValue(TEST_RESOURCE, IntegrationTestSettings.class);
+                .readValue(TEST_RESOURCE.openStream(), IntegrationTestSettings.class);
 
         assumeThat(settings.enabled() != null && !settings.enabled())
                 .as("Integration test was disabled.")

line-bot-jackson/build.gradle.kts

@@ -20,6 +20,7 @@ plugins {
 }
 
 dependencies {
+    api(platform(libs.jackson.bom))
     api(libs.jackson.databind) // Provide configured ObjectMapper.
     implementation(libs.jackson.datatype.jsr310)
 }

line-bot-webhook/build.gradle.kts

@@ -21,6 +21,8 @@ plugins {
 
 
 dependencies {
+    implementation(platform(libs.jackson.bom))
+
     compileOnly(libs.jackson.annotations)
     compileOnly(libs.javax.annotation)
     compileOnly(libs.jakarta.annotation.api)

tests/maven-pom-validation-test.py

@@ -31,6 +31,7 @@
 fails = 0
 
 pattern = re.compile("""<dependency>.*?</dependency>""", re.DOTALL)
+jackson_groupid_pattern = re.compile("""<groupId>com\.fasterxml\.jackson.*?</groupId>""")
 root = Path(os.path.expanduser("~/.m2/repository/com/linecorp/bot/"))
 for fname in root.glob("**/*.pom"):
     if fname.name.startswith("line-bot-spring-boot"):
@@ -42,6 +43,9 @@
         content = fp.read()
         for dependency in re.findall(pattern, content):
             if "<version>" not in dependency:
+                # Skip Jackson dependencies - they are managed by BOM
+                if jackson_groupid_pattern.search(dependency):
+                    continue
                 print(dependency)
                 fails += 1