fix: Bump version of Jackson because of CVEs (#362)

Versions low than 2.9.8 have a number of CVEs filed against it.
aws · Feb 14, 2019 · 140aa4d · 140aa4d
1 parent b2b2c89
commit 140aa4d
Showing 1 changed file with 2 additions and 2 deletions.
diff --git a/packages/jsii-java-runtime/pom.xml.t.js b/packages/jsii-java-runtime/pom.xml.t.js
@@ -52,14 +52,14 @@ process.stdout.write(`<?xml version="1.0" encoding="UTF-8"?>
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-core</artifactId>
-            <version>2.9.5</version>
+            <version>[2.9.8,)</version>
         </dependency>
 
         <!-- https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind -->
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.9.5</version>
+            <version>[2.9.8,)</version>
         </dependency>
 
         <!-- https://mvnrepository.com/artifact/com.google.guava/guava-io -->