chore(deps): bump com.fasterxml.jackson.core:jackson-databind from 2.21.3 to 2.22.0 in /dhis-2/dhis-test-e2e - #24062
Conversation
dependabot
Bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
Bumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) from 2.21.3 to 2.22.0. - [Commits](https://github.com/FasterXML/jackson/commits) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.22.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
9cd73ff to
b1609b8
Compare
|
Holding this — Jackson 2.22.0 was never completely released to Maven Central, so this bump cannot resolve. Jackson decoupled its module version trains around 2.20. In the 2.22.0 train, The trap: Reference — maintainers confirm the stuck Sonatype deploy: FasterXML/jackson#367
and add:
(2.22.1 is suggested upstream as the eventual fix.) No CVE is fixed or introduced between 2.21.x and 2.22.0, so there's no urgency. Recommend closing/holding until Related PRs blocked by the same incomplete release: #24072, #24055, #24056, #24060, #24062. |
|
Superseded by #24391. |
Pull request was closed
1 participant
Bumps com.fasterxml.jackson.core:jackson-databind from 2.21.3 to 2.22.0.
Commits