Bump jackson_version - Fix GHSA-72hv-8253-57qq (#37969)

* Bump jackson_version - Fix GHSA-72hv-8253-57qq

jackson-core: Number Length Constraint Bypass in Async Parser Leads to Potential DoS Condition

Author: stankiewicz

buildSrc/src/main/groovy/org/apache/beam/gradle/BeamModulePlugin.groovy

@@ -623,7 +623,7 @@ class BeamModulePlugin implements Plugin<Project> {
     def httpclient_version = "4.5.13"
     def httpcore_version = "4.4.14"
     def iceberg_bqms_catalog_version = "1.6.1-1.0.1"
-    def jackson_version = "2.15.4"
+    def jackson_version = "2.18.6"
     def jaxb_api_version = "2.3.3"
     def jsr305_version = "3.0.2"
     def everit_json_version = "1.14.2"

sdks/java/container/license_scripts/dep_urls_java.yaml

@@ -58,7 +58,7 @@ xz:
   '1.5': # The original repo is down. This license is taken from https://tukaani.org/xz/java.html.
     license: "file://{}/xz/COPYING"
 jackson-bom:
-  '2.15.4':
+  '2.18.6':
     license: "https://raw.githubusercontent.com/FasterXML/jackson-bom/master/LICENSE"
     type: "Apache License 2.0"
 org.eclipse.jgit: