Jackson Release 2.18.8

Patch version of 2.18, under development as of May 2026.

Following fixes will be included in this patch release.

Changes, core

Streaming

• #1611: Apply number-length validator on streaming integer path of async parser

Databind

• #5950: Improve UUIDeserializer error handling
• #5951: Improve InetSocketAddress deserialization
• #5969: @JsonView by-passed for some "setterless" creator properties
• #5971: @JsonView by-passed for unwrapped creator parameters
• #5974: @JsonIgnore on Record property ignored with PropertyNamingStrategy
• #5981: BasicPolymorphicTypeValidator setting allowIfSubTypeIsArray() should validate element type
• #5988: PolymorphicTypeValidator needs to validate generic type parameters too
• #5993: UPPER_SNAKE_CASE / LOWER_CASE NamingStrategyImpls fold case using JVM default locale (Turkish-I bug)

Changes, data formats

Avro

• #696: Incomplete number length validation in Ion decoder (for BigDecimal and/or BigInteger)

TOML

• #679: Validate integer length for hex/octal/binary radix literals

XML

• #863: Fix to support Woodstox 7.2.0 (but no dep version bump)