Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Update to Jackson 2.9.9 #122

Merged

Conversation

braveulysses
Copy link
Collaborator

What does this implement/fix? Explain your changes.

Updates the SCIM 2 SDK to use Jackson 2.9.9.
Jackson 2.9.9 addresses a security vulnerability that was possible under certain specific conditions. The SCIM 2 SDK was not directly affected by this vulnerability.

This PR also includes the following changes:

  • Deprecated the ScimDateFormat class. An alternative to this class will be provided in SCIM 2 SDK 2.3.0.
  • Set the compile target to Java 7.
  • Updated the Travis CI config to use OpenJDK 8. Java 7 is no longer available in the build environment, and Java 11 cannot be used until the target version is updated to Java 8 (see this OpenJDK issue).

Does this close any currently open issues?

This addresses #120. A followup set of changes will remove deprecated Jackson API usages.

@braveulysses braveulysses self-assigned this Jun 24, 2019
@braveulysses braveulysses merged commit e38e079 into master Jun 24, 2019
@braveulysses braveulysses deleted the topic/issue120_jackson-299-dependency-update-only branch June 24, 2019 20:35
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
None yet
Projects
None yet
Development

Successfully merging this pull request may close these issues.

None yet

1 participant