Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Update Jackson to 2.13.3 #5076

Merged
merged 4 commits into from
Jun 12, 2022
Merged

Update Jackson to 2.13.3 #5076

merged 4 commits into from
Jun 12, 2022

Conversation

senivam
Copy link
Contributor

@senivam senivam commented Jun 7, 2022

Signed-off-by: Maxim Nesen [email protected]

@senivam
Update Jackson to 2.13.3
b4227a2 
Signed-off-by: Maxim Nesen <[email protected]>
@senivam senivam self-assigned this Jun 7, 2022
@senivam senivam linked an issue Jun 7, 2022 that may be closed by this pull request
Update Jackson to 2.13.3 #5067
Closed
@senivam
Copy link
Contributor Author

senivam commented Jun 7, 2022 •
edited
Loading

CQs:

  • 24131 - com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
  • 24132 - com.fasterxml.jackson.jaxrs:jackson-jaxrs-base
  • 24134 - com.fasterxml.jackson.core:jackson-core
  • 24135 - com.fasterxml.jackson.core:jackson-annotations
  • 24136 - com.fasterxml.jackson.core:jackson-databind
  • 24137 - com.fasterxml.jackson.module:jackson-module-jaxb-annotations
  • 24138 - com.fasterxml.jackson.datatype:jackson-datatype-jdk8
  • 24139 - com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider

created

@jansupol
Copy link
Contributor

jansupol commented Jun 8, 2022

I think that we need CQs for

  • com.fasterxml.jackson.core:jackson-core
  • com.fasterxml.jackson.jaxrs:jackson-jaxrs-base
  • com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
  • com.fasterxml.jackson.module:jackson-module-jaxb-annotations
  • com.fasterxml.jackson.core:jackson-databind
  • com.fasterxml.jackson.core:jackson-annotations
  • com.fasterxml.jackson.datatype:jackson-datatype-jdk8
  • com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider

Especially the jackson-databind module because it is where the CVE is.

@senivam
Copy link
Contributor Author

senivam commented Jun 9, 2022

I think that we need CQs for

  • com.fasterxml.jackson.core:jackson-core
  • com.fasterxml.jackson.jaxrs:jackson-jaxrs-base
  • com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
  • com.fasterxml.jackson.module:jackson-module-jaxb-annotations
  • com.fasterxml.jackson.core:jackson-databind
  • com.fasterxml.jackson.core:jackson-annotations
  • com.fasterxml.jackson.datatype:jackson-datatype-jdk8
  • com.fasterxml.jackson.jakarta.rs:jackson-jakarta-rs-json-provider

Especially the jackson-databind module because it is where the CVE is.

A full list of CQs is listed in my message above.

@jansupol
Copy link
Contributor

jansupol commented Jun 9, 2022 •
edited
Loading

Please update notice file in the jackson module, too.

@jansupol jansupol added this to the 2.36 milestone Jun 9, 2022
@senivam senivam merged commit f20d45d into eclipse-ee4j:master Jun 12, 2022
@senivam senivam deleted the jacksonUpdate branch June 12, 2022 06:47
This was referenced Jun 14, 2022
Merged
Merged
Closed
Merged
Merged
Closed
Merged
Merged
Merged
Merged
Merged
Merged
Merged
This was referenced Dec 7, 2022
Closed
Closed
@renovate renovate bot mentioned this pull request Dec 22, 2022
Closed
1 task
This was referenced Jan 6, 2023
Merged
Closed
This was referenced Feb 11, 2023
Merged
Closed
@renovate renovate bot mentioned this pull request Mar 23, 2023
Closed
1 task
@mend-for-github-com mend-for-github-com bot mentioned this pull request Mar 26, 2023
Open
This was referenced May 11, 2023
Open
Open
This was referenced Jun 1, 2023
Merged
Closed
This was referenced Jun 4, 2023
Merged
Closed
This was referenced Jun 15, 2023
Merged
Merged
This was referenced Jul 6, 2023
Open
Open
This was referenced Aug 28, 2023
Merged
Merged
@mend-for-github-com mend-for-github-com bot mentioned this pull request Dec 4, 2023
Open
@mend-for-github-com mend-for-github-com bot mentioned this pull request Jan 11, 2024
Open
This was referenced Jan 16, 2024
Closed
Closed
@renovate renovate bot mentioned this pull request Mar 1, 2024
Merged
1 task
@renovate renovate bot mentioned this pull request Mar 20, 2024
Closed
1 task
This was referenced Apr 13, 2024
Merged
Open
Open
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Reviewers

@jansupol jansupol jansupol approved these changes

@jbescos jbescos jbescos approved these changes

Assignees

@senivam senivam

Labels
CQ required
Projects
None yet
Milestone
2.36
Development

Successfully merging this pull request may close these issues.

Update Jackson to 2.13.3
3 participants
@senivam @jansupol @jbescos