Script 'mail_helper' called by obssrc
Hello community,
here is the log from the commit of package jackson-dataformats-binary for
openSUSE:Factory checked in at 2026-07-15 16:56:24
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Comparing /work/SRC/openSUSE:Factory/jackson-dataformats-binary (Old)
and /work/SRC/openSUSE:Factory/.jackson-dataformats-binary.new.1991 (New)
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Package is "jackson-dataformats-binary"
Wed Jul 15 16:56:24 2026 rev:12 rq:1365956 version:2.18.9
Changes:
--------
---
/work/SRC/openSUSE:Factory/jackson-dataformats-binary/jackson-dataformats-binary.changes
2026-06-25 17:22:17.120022438 +0200
+++
/work/SRC/openSUSE:Factory/.jackson-dataformats-binary.new.1991/jackson-dataformats-binary.changes
2026-07-15 17:12:23.221144358 +0200
@@ -1,0 +2,7 @@
+Wed Jul 15 11:31:20 UTC 2026 - Fridrich Strba <[email protected]>
+
+- Update to 2.18.9
+ * No changes, only syncing the whole stack for databind security
+ issues
+
+-------------------------------------------------------------------
Old:
----
jackson-dataformats-binary-2.18.8.tar.gz
New:
----
jackson-dataformats-binary-2.18.9.tar.gz
++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++++
Other differences:
------------------
++++++ jackson-dataformats-binary.spec ++++++
--- /var/tmp/diff_new_pack.dLQtXd/_old 2026-07-15 17:12:23.793164048 +0200
+++ /var/tmp/diff_new_pack.dLQtXd/_new 2026-07-15 17:12:23.793164048 +0200
@@ -19,7 +19,7 @@
%bcond_with extra_dataformats
# Extra formats are disabled because of circular dependencies
Name: jackson-dataformats-binary
-Version: 2.18.8
+Version: 2.18.9
Release: 0
Summary: Jackson standard binary data format backends
License: Apache-2.0 AND BSD-3-Clause
++++++ _scmsync.obsinfo ++++++
--- /var/tmp/diff_new_pack.dLQtXd/_old 2026-07-15 17:12:23.821165013 +0200
+++ /var/tmp/diff_new_pack.dLQtXd/_new 2026-07-15 17:12:23.825165149 +0200
@@ -1,6 +1,6 @@
-mtime: 1782391542
-commit: 06c7b223442ae67c3839278cebb9b0b9cf2e1edd694edf0228324d3c68e993fd
+mtime: 1784115165
+commit: 354542f0cb121b9146f20e1ccc6dfbc0d7cd35a23b37e776e8cb2c5b4c4c5a00
url: https://src.opensuse.org/java-packages/jackson-dataformats-binary
-revision: 06c7b223442ae67c3839278cebb9b0b9cf2e1edd694edf0228324d3c68e993fd
+revision: 354542f0cb121b9146f20e1ccc6dfbc0d7cd35a23b37e776e8cb2c5b4c4c5a00
projectscmsync: https://src.opensuse.org/java-packages/_ObsPrj
++++++ build.specials.obscpio ++++++
++++++ build.specials.obscpio ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore' old/.gitignore new/.gitignore
--- old/.gitignore 1970-01-01 01:00:00.000000000 +0100
+++ new/.gitignore 2026-07-15 13:32:45.000000000 +0200
@@ -0,0 +1 @@
+.osc
++++++ jackson-dataformats-binary-2.18.8.tar.gz ->
jackson-dataformats-binary-2.18.9.tar.gz ++++++
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/jackson-dataformats-binary-jackson-dataformats-binary-2.18.8/avro/pom.xml
new/jackson-dataformats-binary-jackson-dataformats-binary-2.18.9/avro/pom.xml
---
old/jackson-dataformats-binary-jackson-dataformats-binary-2.18.8/avro/pom.xml
2026-05-29 02:50:42.000000000 +0200
+++
new/jackson-dataformats-binary-jackson-dataformats-binary-2.18.9/avro/pom.xml
2026-07-08 02:30:06.000000000 +0200
@@ -9,7 +9,7 @@
<parent>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformats-binary</artifactId>
- <version>2.18.8</version>
+ <version>2.18.9</version>
</parent>
<artifactId>jackson-dataformat-avro</artifactId>
<name>Jackson dataformat: Avro</name>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/jackson-dataformats-binary-jackson-dataformats-binary-2.18.8/cbor/pom.xml
new/jackson-dataformats-binary-jackson-dataformats-binary-2.18.9/cbor/pom.xml
---
old/jackson-dataformats-binary-jackson-dataformats-binary-2.18.8/cbor/pom.xml
2026-05-29 02:50:42.000000000 +0200
+++
new/jackson-dataformats-binary-jackson-dataformats-binary-2.18.9/cbor/pom.xml
2026-07-08 02:30:06.000000000 +0200
@@ -9,7 +9,7 @@
<parent>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformats-binary</artifactId>
- <version>2.18.8</version>
+ <version>2.18.9</version>
</parent>
<artifactId>jackson-dataformat-cbor</artifactId>
<name>Jackson dataformat: CBOR</name>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/jackson-dataformats-binary-jackson-dataformats-binary-2.18.8/ion/pom.xml
new/jackson-dataformats-binary-jackson-dataformats-binary-2.18.9/ion/pom.xml
---
old/jackson-dataformats-binary-jackson-dataformats-binary-2.18.8/ion/pom.xml
2026-05-29 02:50:42.000000000 +0200
+++
new/jackson-dataformats-binary-jackson-dataformats-binary-2.18.9/ion/pom.xml
2026-07-08 02:30:06.000000000 +0200
@@ -9,7 +9,7 @@
<parent>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformats-binary</artifactId>
- <version>2.18.8</version>
+ <version>2.18.9</version>
</parent>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformat-ion</artifactId>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/jackson-dataformats-binary-jackson-dataformats-binary-2.18.8/pom.xml
new/jackson-dataformats-binary-jackson-dataformats-binary-2.18.9/pom.xml
--- old/jackson-dataformats-binary-jackson-dataformats-binary-2.18.8/pom.xml
2026-05-29 02:50:42.000000000 +0200
+++ new/jackson-dataformats-binary-jackson-dataformats-binary-2.18.9/pom.xml
2026-07-08 02:30:06.000000000 +0200
@@ -4,12 +4,12 @@
<parent>
<groupId>com.fasterxml.jackson</groupId>
<artifactId>jackson-base</artifactId>
- <version>2.18.8</version>
+ <version>2.18.9</version>
</parent>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformats-binary</artifactId>
<name>Jackson dataformats: Binary</name>
- <version>2.18.8</version>
+ <version>2.18.9</version>
<packaging>pom</packaging>
<description>Parent pom for Jackson binary dataformats.
</description>
@@ -34,7 +34,7 @@
<connection>scm:git:[email protected]:FasterXML/jackson-dataformats-binary.git</connection>
<developerConnection>scm:git:[email protected]:FasterXML/jackson-dataformats-binary.git</developerConnection>
<url>https://github.com/FasterXML/jackson-dataformats-binary</url>
- <tag>jackson-dataformats-binary-2.18.8</tag>
+ <tag>jackson-dataformats-binary-2.18.9</tag>
</scm>
<issueManagement>
<url>https://github.com/FasterXML/jackson-dataformats-binary/issues</url>
@@ -44,7 +44,7 @@
<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<!-- for Reproducible Builds -->
-
<project.build.outputTimestamp>2026-05-29T00:50:04Z</project.build.outputTimestamp>
+
<project.build.outputTimestamp>2026-07-08T00:29:20Z</project.build.outputTimestamp>
<!-- 20-Mar-2021, tatu: limit heap for tests to catch some
of "too big allocation" cases
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/jackson-dataformats-binary-jackson-dataformats-binary-2.18.8/protobuf/pom.xml
new/jackson-dataformats-binary-jackson-dataformats-binary-2.18.9/protobuf/pom.xml
---
old/jackson-dataformats-binary-jackson-dataformats-binary-2.18.8/protobuf/pom.xml
2026-05-29 02:50:42.000000000 +0200
+++
new/jackson-dataformats-binary-jackson-dataformats-binary-2.18.9/protobuf/pom.xml
2026-07-08 02:30:06.000000000 +0200
@@ -9,7 +9,7 @@
<parent>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformats-binary</artifactId>
- <version>2.18.8</version>
+ <version>2.18.9</version>
</parent>
<artifactId>jackson-dataformat-protobuf</artifactId>
<name>Jackson dataformat: Protobuf</name>
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/jackson-dataformats-binary-jackson-dataformats-binary-2.18.8/release-notes/VERSION-2.x
new/jackson-dataformats-binary-jackson-dataformats-binary-2.18.9/release-notes/VERSION-2.x
---
old/jackson-dataformats-binary-jackson-dataformats-binary-2.18.8/release-notes/VERSION-2.x
2026-05-29 02:50:42.000000000 +0200
+++
new/jackson-dataformats-binary-jackson-dataformats-binary-2.18.9/release-notes/VERSION-2.x
2026-07-08 02:30:06.000000000 +0200
@@ -14,6 +14,10 @@
=== Releases ===
------------------------------------------------------------------------
+2.18.9 (07-Jul-2026)
+
+No changes since 2.18.8
+
2.18.8 (28-Mar-2026)
#696: (ion) Incomplete number length validation in Ion decoder
diff -urN '--exclude=CVS' '--exclude=.cvsignore' '--exclude=.svn'
'--exclude=.svnignore'
old/jackson-dataformats-binary-jackson-dataformats-binary-2.18.8/smile/pom.xml
new/jackson-dataformats-binary-jackson-dataformats-binary-2.18.9/smile/pom.xml
---
old/jackson-dataformats-binary-jackson-dataformats-binary-2.18.8/smile/pom.xml
2026-05-29 02:50:42.000000000 +0200
+++
new/jackson-dataformats-binary-jackson-dataformats-binary-2.18.9/smile/pom.xml
2026-07-08 02:30:06.000000000 +0200
@@ -9,7 +9,7 @@
<parent>
<groupId>com.fasterxml.jackson.dataformat</groupId>
<artifactId>jackson-dataformats-binary</artifactId>
- <version>2.18.8</version>
+ <version>2.18.9</version>
</parent>
<artifactId>jackson-dataformat-smile</artifactId>
<name>Jackson dataformat: Smile</name>
