Jackson Release 2.18.6

Patch version of 2.18, released on February 22, 2026.

Following fixes are included in this patch release.

Changes, core

Streaming

• #1512: Number-parsing fix for UTF8DataInputJsonParser
• #1548: StreamReadConstraints.maxDocumentLength not checked when creating parser with fixed buffer
• #1555: Enforce StreamReadConstraints.maxNumberLength for non-blocking (async) parser

Changes, data formats

Avro

• #645: Remove use of Avro Schema.Parser().setValidate() to allow use of Avro core 1.12.1 (2.x)

CBOR

• #649: StreamReadConstraints.maxDocumentLength not checked when creating parser with fixed buffer
• #652: Ensure CBOR backend supports StreamReadConstraints.maxTokenCount

CSV

• #613: Support StreamReadConstraints.maxDocumentLength() validation for CSV module

Smile

• #649: StreamReadConstraints.maxDocumentLength not checked when creating parser with fixed buffer
• #651: Ensure Smile backend supports StreamReadConstraints.maxTokenCount