Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Bump jackson versions to 2.13.2 to address cve's #232

Merged
merged 3 commits into from
Mar 22, 2022
Merged

Conversation

BlueEldur
Copy link
Contributor

@BlueEldur BlueEldur commented Mar 22, 2022

Problem

Minor version update(backwrads compatible) to 2.13.2.
Add related jackson dependencies to dependencymanagement to guard against jackson version mismatches.

Solution

Does this solution apply anywhere else?
  • yes
  • no
If yes, where?

Test Strategy

Testing done:
  • Unit tests
  • Integration tests
  • System tests
  • Manual tests

Release Plan

@BlueEldur BlueEldur requested a review from a team as a code owner March 22, 2022 21:49
Copy link
Contributor

@cjolivier01 cjolivier01 left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I don;t feel very strongly about it, but any reason not to merge these two properties?

@BlueEldur
Copy link
Contributor Author

I was thinking of the same, but I thought perhaps there may be some downstream dependencies that were directly using either of them @cjolivier01

@BlueEldur
Copy link
Contributor Author

BlueEldur commented Mar 22, 2022

actually I realize we can just have one reference the other to consolidate. Woops. Made that change. @cjolivier01

@BlueEldur BlueEldur merged commit dba84ef into 5.4.x Mar 22, 2022
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

2 participants