Changelist:

- Fixed OSS Vulnerability by upgrading it to latest release version
- Removed unused ObjectMapper Instance

Author: Akshay Kotagal

api/pom.xml

@@ -27,14 +27,17 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-core</artifactId>
+            <version>[2.13.0,)</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
+            <version>[2.13.0,)</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.dataformat</groupId>
             <artifactId>jackson-dataformat-yaml</artifactId>
+            <version>[2.13.0,)</version>
         </dependency>
         <dependency>
             <groupId>javax.validation</groupId>

api/src/main/java/io/serverlessworkflow/api/deserializers/ConstantsDeserializer.java

@@ -53,7 +53,6 @@ public ConstantsDeserializer(WorkflowPropertySource context) {
   @Override
   public Constants deserialize(JsonParser jp, DeserializationContext ctxt) throws IOException {
 
-    ObjectMapper mapper = (ObjectMapper) jp.getCodec();
     JsonNode node = jp.getCodec().readTree(jp);
 
     Constants constants = new Constants();

api/src/main/java/io/serverlessworkflow/api/deserializers/SecretsDeserializer.java

@@ -54,7 +54,6 @@ public SecretsDeserializer(WorkflowPropertySource context) {
 
   @Override
   public Secrets deserialize(JsonParser jp, DeserializationContext ctxt) throws IOException {
-    ObjectMapper mapper = (ObjectMapper) jp.getCodec();
     JsonNode node = jp.getCodec().readTree(jp);
 
     Secrets secrets = new Secrets();

api/src/main/java/io/serverlessworkflow/api/deserializers/SubFlowRefDeserializer.java

@@ -18,7 +18,6 @@
 import com.fasterxml.jackson.core.JsonParser;
 import com.fasterxml.jackson.databind.DeserializationContext;
 import com.fasterxml.jackson.databind.JsonNode;
-import com.fasterxml.jackson.databind.ObjectMapper;
 import com.fasterxml.jackson.databind.deser.std.StdDeserializer;
 import io.serverlessworkflow.api.functions.SubFlowRef;
 import io.serverlessworkflow.api.interfaces.WorkflowPropertySource;
@@ -47,7 +46,6 @@ public SubFlowRefDeserializer(WorkflowPropertySource context) {
   @Override
   public SubFlowRef deserialize(JsonParser jp, DeserializationContext ctxt) throws IOException {
 
-    ObjectMapper mapper = (ObjectMapper) jp.getCodec();
     JsonNode node = jp.getCodec().readTree(jp);
 
     SubFlowRef subflowRef = new SubFlowRef();