From aebdabac16e88e3fe6cc15a565cdc8ad1da3091e Mon Sep 17 00:00:00 2001 From: Eric Buckley Date: Thu, 9 Jul 2026 12:24:58 -0700 Subject: [PATCH] build(reporting-pipeline-service): bump jackson-bom version Update jackson-bom from 2.21.4 to 2.21.5 to address CVE-2026-54515. --- reporting-pipeline-service/build.gradle | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/reporting-pipeline-service/build.gradle b/reporting-pipeline-service/build.gradle index 2f126c68a..dfa93fd60 100644 --- a/reporting-pipeline-service/build.gradle +++ b/reporting-pipeline-service/build.gradle @@ -19,7 +19,7 @@ ext['commons-lang3.version'] = '3.20.0' // Override the Spring Boot managed Jackson version to address CVE-2026-54513. // jackson-bom.version controls all Jackson modules (databind, core, annotations, dataformats) -ext['jackson-bom.version'] = '2.21.4' +ext['jackson-bom.version'] = '2.21.5' group = 'gov.cdc.etldatapipeline' version = '0.0.1-SNAPSHOT'