2.9 with Scala 2.13 not supporting pack4j 6.00 dependency :Jackson Data-bind 2.15.x

[pronto-kaushal]

Play Version

2.9 with scala 2.13

API

Java

Operating System

Windows

JDK

17

Library Dependencies

	"org.pac4j" %% "play-pac4j" % "12.0.0-PLAY2.9",
	"org.pac4j" % "pac4j-core" % "6.0.0",
	"org.pac4j" % "pac4j-http" % "6.0.0",
	"org.pac4j" % "pac4j-saml" % "6.0.0",

[mkurz]

There is a link in the documentation to an GitHub discussions thread on how to upgrade Jackson in a Play application:

• https://www.playframework.com/documentation/3.0.x/General#End-of-life-(EOL)-Dates
• which links to https://github.com/orgs/playframework/discussions/11222

So for you the solution would be to add to your build.sbt:

val jacksonVersion = "2.14.3" // or 2.16.1 if you want to upgrade to latest jackson version (Play 2.9 or 3.0 use 2.14.3 by default)

val jacksonOverrides = Seq(
  "com.fasterxml.jackson.core"     % "jackson-core",
  "com.fasterxml.jackson.core"     % "jackson-annotations",
  "com.fasterxml.jackson.datatype" % "jackson-datatype-jdk8",
  "com.fasterxml.jackson.datatype" % "jackson-datatype-jsr310"
).map(_ % jacksonVersion)

val jacksonDatabindOverrides = Seq(
  "com.fasterxml.jackson.core" % "jackson-databind" % jacksonVersion
)

val akkaSerializationJacksonOverrides = Seq(
  "com.fasterxml.jackson.dataformat" % "jackson-dataformat-cbor",
  "com.fasterxml.jackson.module"     % "jackson-module-parameter-names",
  "com.fasterxml.jackson.module"     %% "jackson-module-scala",
).map(_ % jacksonVersion)

dependencyOverrides ++= jacksonDatabindOverrides ++ jacksonOverrides ++ akkaSerializationJacksonOverrides

Be aware that here I used dependencyOverrides instead of libraryDependencies, which mean you can also downgrade Jackson to 2.14.3 if desired (libraryDependencies will not allow downgrading dependencies but "only" defines the "smallest" version to be used).

Actually I would recommend to stay on 2.14.3 for now because there might be problem upgrading to Jackson 2.15 or newer (but I don't really now if this really is a problem in real life, I will first have to look into #12440):

• Jackson 2.15.4 (was 2.14.3) #12440

Also you can list the dependencies with following sbt commands to check which dependencies are pulled in:

dependencyTree

# or if you want to write that in a file (however this does not work
# if you have a multi-project build because each project would override other project's output files)
dependencyTree/toFile /tmp/my_project_dependencies -f

Or you can also list the classpath to see which jar files are used, to make sure only Jackson 2.14.x (or 2.16.x) jars are put on the classpath actually:

show runtime:fullClasspath

For example, I added the pac4j-* dependencies myself and this is what I got:

[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.16.0/jackson-annotations-2.16.0.jar)
[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.16.0/jackson-core-2.16.0.jar)
[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.16.0/jackson-databind-2.16.0.jar)
[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-cbor/2.14.3/jackson-dataformat-cbor-2.14.3.jar)
[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.14.3/jackson-datatype-jdk8-2.14.3.jar)
[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.15.2/jackson-datatype-jsr310-2.15.2.jar)
[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-parameter-names/2.14.3/jackson-module-parameter-names-2.14.3.jar)
[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-scala_2.13/2.14.3/jackson-module-scala_2.13-2.14.3.jar)

You can see ☝️ here that mixed jackson dependencies are on the classpath (2.14.3, 2.15.2 and 2.16.0), which should be avoided.

After applying the dependencyOverrides snipped above, all the dependencies are 2.14.3 now:

[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-annotations/2.14.3/jackson-annotations-2.14.3.jar)
[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-core/2.14.3/jackson-core-2.14.3.jar)
[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.14.3/jackson-databind-2.14.3.jar)
[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/dataformat/jackson-dataformat-cbor/2.14.3/jackson-dataformat-cbor-2.14.3.jar)
[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jdk8/2.14.3/jackson-datatype-jdk8-2.14.3.jar)
[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/datatype/jackson-datatype-jsr310/2.14.3/jackson-datatype-jsr310-2.14.3.jar)
[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-parameter-names/2.14.3/jackson-module-parameter-names-2.14.3.jar)
[info] * Attributed(/home/mkurz/.cache/coursier/v1/https/repo1.maven.org/maven2/com/fasterxml/jackson/module/jackson-module-scala_2.13/2.14.3/jackson-module-scala_2.13-2.14.3.jar)

[pronto-kaushal]

Thanks ...! Matthias It works

[mkurz]

Great!