chore(deps): bump com.fasterxml.jackson.core:jackson-core from 2.18.6 to 2.22.2 - #21
Conversation
Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.18.6 to 2.22.2. - [Commits](FasterXML/jackson-core@jackson-core-2.18.6...jackson-core-2.22.2) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-version: 2.22.2 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![cursor[bot]](https://avatars.githubusercontent.com/in/1210556?s=60&v=4){kind=small}
There was a problem hiding this comment.
Cursor Bugbot has reviewed your changes using default effort and found 1 potential issue.
❌ Bugbot Autofix is OFF. To automatically fix reported issues with cloud agents, enable autofix in the Cursor dashboard.
Reviewed by Cursor Bugbot for commit c915bc9. Configure here.
| <groupId>com.fasterxml.jackson.core</groupId> | ||
| <artifactId>jackson-core</artifactId> | ||
| <version>2.18.6</version> | ||
| <version>2.22.2</version> |
There was a problem hiding this comment.
Jackson core and databind versions diverge
Medium Severity
jackson-core is now 2.22.2 while jackson-databind stays at 2.18.6. Those artifacts were previously aligned, and Jackson only guarantees internal API compatibility across adjacent minor versions. jackson-databind calls into jackson-core internals, so this four-minor gap can surface as runtime linkage or parsing failures, especially in this OSGi plugin.
Additional Locations (1)
Reviewed by Cursor Bugbot for commit c915bc9. Configure here.
Bumps com.fasterxml.jackson.core:jackson-core from 2.18.6 to 2.22.2.
Commits
24bab14[maven-release-plugin] prepare release jackson-core-2.22.2dbbd2a0Prep for 2.22.2 release038fc7aMerge branch '2.21' into 2.22aaf3398Merge branch '2.20' into 2.212911daeMerge branch '2.19' into 2.20ed8e9dcMerge branch '2.18' into 2.19f8dc7d7Post-release dep version bump7add1bf[maven-release-plugin] prepare for next development iterationd11418c[maven-release-plugin] prepare release jackson-core-2.18.1066a7a17Prep for 2.18.10 releaseDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)Note
Cursor Bugbot is generating a summary for commit c915bc9. Configure here.