← 输入框|github.com|刷新
Skip to content

Bump Jackson to 2.22.4 - #1462

Merged
pratushnyi merged 1 commit into
3.0.1-snapshotfrom
bump-jackson-to-2.22.4
Oct 26, 2026
Merged

pratushnyi merged 1 commit into
3.0.1-snapshotfrom
bump-jackson-to-2.22.4

Conversation

@pratushnyi

@pratushnyi pratushnyi commented Oct 26, 2026 •

Copy link
Copy Markdown

Context

Jackson 2.22.2 is affected by known vulnerabilities. Update the Jackson BOM to 2.22.4 so all managed Jackson components use the patched release in the 3.0.x hotfix line.

This does not change project APIs or configuration. The aggregate quality checks and the test suites for the direct Jackson consumers (allure-java-commons, allure-jsonunit, allure-spring-web, allure-grpc, and allure-jpms-tests) pass with the updated BOM.

Checklist

@pratushnyi pratushnyi added the pr:dependencies Pull requests that update a dependency label Oct 26, 2026
@pratushnyi
pratushnyi merged commit 9459579 into 3.0.1-snapshot Oct 26, 2026
4 of 7 checks passed
@pratushnyi
pratushnyi deleted the bump-jackson-to-2.22.4 branch October 26, 2026 08:22
@github-actions

Copy link
Copy Markdown

Allure Report Summary

     Environment Duration Stats New Flaky Retry
     All tests 39m 55s Passed tests⁠ 2452
Skipped tests⁠ 1
0 0 0
     ubuntu-jdk-17 18m 24s Passed tests⁠ 1209
Skipped tests⁠ 1
0 0 0
     ubuntu-jdk-25 21m 31s Passed tests⁠ 1243 0 0 0

Reports: Awesome

Allure TestOps: Allure Java GitHub actions run (2026-10-26T07:40:44.711Z)

Artifacts used (2)
  • allure-results-test-jdk-17.zip
  • allure-results-test-jdk-25.zip

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

pr:dependencies Pull requests that update a dependency

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants