chore(deps): bump jackson.version from 2.21.2 to 2.22.0 in /dhis-2 - #24072
chore(deps): bump jackson.version from 2.21.2 to 2.22.0 in /dhis-2#24072dependabot[bot] wants to merge 1 commit into
Conversation
Bumps `jackson.version` from 2.21.2 to 2.22.0. Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.21.2 to 2.22.0 - [Commits](FasterXML/jackson-dataformat-xml@jackson-dataformat-xml-2.21.2...jackson-dataformat-xml-2.22.0) Updates `com.fasterxml.jackson:jackson-bom` from 2.21.2 to 2.22.0 - [Commits](FasterXML/jackson-bom@jackson-bom-2.21.2...jackson-bom-2.22.0) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml dependency-version: 2.22.0 dependency-type: direct:development update-type: version-update:semver-minor - dependency-name: com.fasterxml.jackson:jackson-bom dependency-version: 2.22.0 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
![github-actions[bot]](https://avatars.githubusercontent.com/in/15368?s=60&v=4){kind=small}
|
Holding this — Jackson 2.22.0 was never completely released to Maven Central, so this bump cannot resolve. Jackson decoupled its module version trains around 2.20. In the 2.22.0 train, The trap: Reference — maintainers confirm the stuck Sonatype deploy: FasterXML/jackson#367
and add:
(2.22.1 is suggested upstream as the eventual fix.) No CVE is fixed or introduced between 2.21.x and 2.22.0, so there's no urgency. Recommend closing/holding until Related PRs blocked by the same incomplete release: #24072, #24055, #24056, #24060, #24062. |
Pull request was closed
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
2 participants
Bumps
jackson.versionfrom 2.21.2 to 2.22.0.Updates
com.fasterxml.jackson.dataformat:jackson-dataformat-xmlfrom 2.21.2 to 2.22.0Commits
4c702ae[maven-release-plugin] prepare release jackson-dataformat-xml-2.22.0e6a9a50Prep for 2.22.0 release80735f2Merge branch '2.21' into 2.x5e5f3faPost-release dep version bump4c482a6[maven-release-plugin] prepare for next development iteratione29dfd9[maven-release-plugin] prepare release jackson-dataformat-xml-2.21.45d81f46Prep for 2.21.4 release5db34feMerge branch '2.20' into 2.21a12b8dfMerge branch '2.19' into 2.207ae7fdbMerge branch '2.18' into 2.19Updates
com.fasterxml.jackson:jackson-bomfrom 2.21.2 to 2.22.0Commits
112e859[maven-release-plugin] prepare release jackson-bom-2.22.02cae2cePrep for 2.22.0 release7955d21Merge branch '2.21' into 2.x8922a05Post-release dep version bump1fa9943[maven-release-plugin] prepare for next development iterationd1abd31[maven-release-plugin] prepare release jackson-bom-2.21.42aaea43Prep for 2.21.4 release902ec69Update Woodstox/stax2-api (to 7.2.0/4.3.0)2570647Merge branch '2.21' into 2.x9d3a9d5Post-release dep version bumpYou can trigger a rebase of this PR by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)