MLE-24402 Spark 4 requires Jackson 2.18.2, not 2.17.2

This is good!

Author: rjrudin

NOTICE.txt

@@ -10,7 +10,7 @@ product and version for which you are requesting source code.
 
 Third Party Notices
 
-jackson-dataformat-xml 2.17.2 (Apache-2.0)
+jackson-dataformat-xml 2.18.2 (Apache-2.0)
 jdom2 2.0.6.1 (Apache-2.0)
 jena-arq 5.5.0 (Apache-2.0)
 langchain4j 1.5.0 (Apache-2.0)
@@ -24,7 +24,7 @@ Third-Party Components
 
 The following is a list of the third-party components used by the MarkLogic® Spark connector 2.7.0 (last updated July 31, 2025):
 
-jackson-dataformat-xml 2.17.2 (Apache-2.0)
+jackson-dataformat-xml 2.18.2 (Apache-2.0)
 https://repo1.maven.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-xml/
 For the full text of the Apache-2.0 license, see Apache License 2.0 (Apache-2.0)
 

build.gradle

@@ -47,8 +47,8 @@ subprojects {
         details.because "Using 3.4.2 to minimize CVEs and because Flux is doing the same thing. This only affects the connector tests."
       }
       if (details.requested.group.startsWith('com.fasterxml.jackson')) {
-        details.useVersion '2.17.2'
-        details.because 'Need to match the version used by Spark.'
+        details.useVersion '2.18.2'
+        details.because 'Need to match the version used by Spark 4.0.1.'
       }
       if (details.requested.group.equals("org.slf4j")) {
         details.useVersion "2.0.17"

marklogic-spark-connector/build.gradle

@@ -20,7 +20,7 @@ dependencies {
   compileOnly "org.apache.spark:spark-sql_2.13:${sparkVersion}"
 
   // This is compileOnly as Spark will provide its own copy at runtime.
-  compileOnly "com.fasterxml.jackson.core:jackson-databind:2.17.2"
+  compileOnly "com.fasterxml.jackson.core:jackson-databind:2.18.2"
 
   shadowDependencies("com.marklogic:marklogic-client-api:7.2.0") {
     // Need to use the versions of Jackson preferred by Spark.
@@ -47,7 +47,7 @@ dependencies {
   shadowDependencies "org.apache.tika:tika-core:${tikaVersion}"
 
   // Needed for using XmlMapper.
-  shadowDependencies("com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.17.2") {
+  shadowDependencies("com.fasterxml.jackson.dataformat:jackson-dataformat-xml:2.18.2") {
     // Not needed, as the modules in this group that this dependency depends on are all provided by Spark.
     exclude group: "com.fasterxml.jackson.core"
   }