Skip to content

Update dependencies#187

Merged
attiasas merged 10 commits intojfrog:masterfrom
attiasas:update_dependencies
May 4, 2026
Merged

Update dependencies#187
attiasas merged 10 commits intojfrog:masterfrom
attiasas:update_dependencies

Conversation

@attiasas
Copy link
Copy Markdown
Contributor

@attiasas attiasas commented Apr 30, 2026

chore(deps): bump Jackson, build-info, gradle-dep-tree; align Gradle test fixtures

Summary

This change updates core library versions (JFrog build-info extractors, Jackson, gradle-dep-tree), makes ImpactPath tolerant of unknown JSON fields for Jackson compatibility, and refreshes Gradle-based test resources (Artifactory Gradle plugin 5.x, simpler dependency declarations, Kotlin DSL property handling). .gitignore now ignores bin.

Changes

  • build.gradle: buildInfoVersion 2.41.132.43.6; centralize Jackson at 2.17.3 for jackson-dataformat-yaml and jackson-databind (noted as security-related, Java 8+); gradle-dep-tree 3.0.13.2.1.
  • ImpactPath.java: add @JsonIgnoreProperties(ignoreUnknown = true).
  • .gitignore: add bin.
  • Gradle test fixtures (src/test/resources/gradle/**, packageFinder/gradle): build-info-extractor-gradle classpath 4.+5.+; replace module { dependency(...) } style with plain implementation "..." strings for commons-lang/commons-io in api projects; in Kotlin DSL samples, coerce findProperty(...) to String with ?.toString().orEmpty() for Artifactory username/password.

Notes

  • Jackson upgrade is intended to stay compatible with Java 8+ per the in-file comment; consumers should confirm no conflicting Jackson constraints on the classpath.

@attiasas attiasas added the improvement Automatically generated release notes label Apr 30, 2026
@attiasas attiasas added the safe to test run tests label Apr 30, 2026
@github-actions github-actions Bot removed the safe to test run tests label Apr 30, 2026
@attiasas attiasas added the safe to test run tests label Apr 30, 2026
@github-actions github-actions Bot removed the safe to test run tests label Apr 30, 2026
@attiasas attiasas added the safe to test run tests label Apr 30, 2026
@github-actions github-actions Bot removed the safe to test run tests label Apr 30, 2026
@attiasas attiasas added the safe to test run tests label May 3, 2026
@github-actions github-actions Bot removed the safe to test run tests label May 3, 2026
@attiasas attiasas added the safe to test run tests label May 3, 2026
@github-actions github-actions Bot removed the safe to test run tests label May 3, 2026
@attiasas attiasas added the safe to test run tests label May 3, 2026
@github-actions github-actions Bot removed the safe to test run tests label May 3, 2026
@github-actions github-actions Bot removed the safe to test run tests label May 4, 2026
@attiasas attiasas added the safe to test run tests label May 4, 2026
@github-actions github-actions Bot removed the safe to test run tests label May 4, 2026
@attiasas attiasas requested a review from a team May 4, 2026 07:06
@attiasas attiasas merged commit 75f95e4 into jfrog:master May 4, 2026
19 of 20 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

improvement Automatically generated release notes

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants