Skip to content

Bump jackson-databind to 2.22.3 and bcprov-jdk18on to 1.86 - #900

Open
lisajulia wants to merge 3 commits into
mainfrom
version-bump
Open

lisajulia wants to merge 3 commits into
mainfrom
version-bump

Conversation

@lisajulia

@lisajulia lisajulia commented Oct 9, 2026 •

Copy link
Copy Markdown
Contributor

Update Jackson Databind and Bouncy Castle Provider Dependencies

Chore

🔧 Added explicit dependency management entries to use updated versions of Jackson Databind and the Bouncy Castle cryptography provider.

Changes

  • pom.xml: Pinned jackson-databind to version 2.22.3.
  • pom.xml: Pinned bcprov-jdk18on to version 1.86.
  • 🔄 Regenerate and Update Summary
PR Bot Information

Version: 1.32.6

  • File Content Strategy: Full file content
  • Summary Prompt: Default Prompt
  • Correlation ID: cfa45a10-c3ce-11f1-8b39-1cbf7e0dbdfb
  • LLM: gpt-5.6-sol
  • Output Template: Default Template
  • Event Trigger: pull_request.opened

@lisajulia
lisajulia requested a review from a team as a code owner October 9, 2026 10:47

@hyperspace-pr-bot hyperspace-pr-bot Bot left a comment

Copy link
Copy Markdown
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

The dependency bumps should align each library family rather than overriding individual artifacts, to avoid runtime binary incompatibilities.

PR Bot Information

Version: 1.32.6

  • File Content Strategy: Full file content
  • Correlation ID: cfa45a10-c3ce-11f1-8b39-1cbf7e0dbdfb
  • Agent Instructions:
  • LLM: gpt-5.6-sol
  • Event Trigger: pull_request.opened

Comment thread pom.xml Outdated
Comment thread pom.xml
holgpar
holgpar previously approved these changes Oct 12, 2026
@holgpar
holgpar requested a review from tomk8r October 12, 2026 15:18
@tomk8r
tomk8r requested a review from a team as a code owner October 13, 2026 10:20

@tomk8r tomk8r left a comment

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Jackson artifacts were still 2.22.2.
Cds-services-bom is imported first. It transitively imports its own jackson-bom, which pins all Jackson artifacts to 2.22.2.
→ 0ea5993 moves the direct Jackson dependency before cds-services-bom import.

@tomk8r
tomk8r requested a review from holgpar October 13, 2026 10:27
@holgpar

holgpar commented Oct 13, 2026

Copy link
Copy Markdown
Contributor

Jackson artifacts were still 2.22.2. Cds-services-bom is imported first. It transitively imports its own jackson-bom, which pins all Jackson artifacts to 2.22.2. → 0ea5993 moves the direct Jackson dependency before cds-services-bom import.

Good catch!

This branch has not been deployed

No deployments
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

3 participants