Skip to content

fix(deps): update Jackson to 2.18.9 - #62

Merged
omandryk merged 1 commit into
masterfrom
security/jackson-2.18.9
Aug 11, 2026
Merged

fix(deps): update Jackson to 2.18.9#62
omandryk merged 1 commit into
masterfrom
security/jackson-2.18.9

Conversation

@omandryk

Copy link
Copy Markdown
Owner

Summary

  • update the aligned Jackson Core, Databind, and Annotations version from 2.18.6 to 2.18.9
  • remain on the conservative Jackson 2.18 maintenance line
  • address the repository's 8 open Dependabot alerts (3 high, 5 moderate)

This clean current-master change supersedes Dependabot PRs #55, #57, and #58 without bringing pre-history-rewrite commits back into reachable history.

Verification

  • mvn clean verify -Dgpg.skip=true
  • 9 tests, 0 failures/errors, 7 intentionally skipped live-store tests
  • JAR, sources JAR, and Javadocs JAR built successfully
  • dependency tree resolves jackson-core, jackson-databind, and jackson-annotations at 2.18.9

No production Java code or public API changes.

@omandryk
omandryk merged commit 79b3d7a into master Aug 11, 2026
4 checks passed
@omandryk
omandryk deleted the security/jackson-2.18.9 branch August 11, 2026 16:07
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant