Skip to content

Update jackson-datatype-jdk8, ... to 2.20.0 #4022

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Open
wants to merge 1 commit into
base: main
Choose a base branch
from
Open

Update jackson-datatype-jdk8, ... to 2.20.0 #4022

Changes from all commits
Commits
Show all changes
1 commit
Select commit
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
4 changes: 2 additions & 2 deletions build.sbt
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -964,8 +964,8 @@ lazy val fluentd =
// td-client-java -> json-simple happened to include junit 4.10 [CVE-2020-15250]
exclude ("junit", "junit"),
// Necessary for td-client-java, which is used in fluency-treasuredata
"com.fasterxml.jackson.datatype" % "jackson-datatype-json-org" % "2.18.4" % Provided,
"com.fasterxml.jackson.datatype" % "jackson-datatype-jdk8" % "2.18.4" % Provided,
"com.fasterxml.jackson.datatype" % "jackson-datatype-json-org" % "2.20.0" % Provided,
"com.fasterxml.jackson.datatype" % "jackson-datatype-jdk8" % "2.20.0" % Provided,
Comment on lines +967 to +968
Copy link
Contributor

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

critical

The updated Jackson dependency version 2.20.0 does not appear to exist in public Maven repositories. This will likely cause a build failure due to dependency resolution errors. The previous version 2.18.4 also seems to be unavailable.

The latest published version for these artifacts (jackson-datatype-json-org and jackson-datatype-jdk8) is 2.17.2.

Please verify the correct version numbers. If the intent was to update to the latest, you should use 2.17.2.

For better maintainability, you could also define this version as a variable and reuse it for both dependencies.

        "com.fasterxml.jackson.datatype" % "jackson-datatype-json-org" % "2.17.2" % Provided,
        "com.fasterxml.jackson.datatype" % "jackson-datatype-jdk8"     % "2.17.2" % Provided,

// Redirecting slf4j log from Fluency to aiframe-log
"org.slf4j" % "slf4j-jdk14" % SLF4J_VERSION
)
Expand Down
Loading