This is an automated email from the ASF dual-hosted git repository.
paulk pushed a commit to branch master
in repository https://gitbox.apache.org/repos/asf/groovy.git
The following commit(s) were added to refs/heads/master by this push:
new fb188046e8 GROOVY-11759: Bump jackson to 2.20.0
fb188046e8 is described below
commit fb188046e84b6b3d5ac614e4d447445373289b8a
Author: Paul King <[email protected]>
AuthorDate: Tue Sep 23 08:58:22 2025 +1000
GROOVY-11759: Bump jackson to 2.20.0
---
build-logic/build.gradle | 2 +
gradle/verification-metadata.xml | 107 ++++++++++++++++++-----------------
subprojects/groovy-yaml/build.gradle | 2 +-
versions.properties | 3 +-
4 files changed, 59 insertions(+), 55 deletions(-)
diff --git a/build-logic/build.gradle b/build-logic/build.gradle
index 3ba08cd365..d30d97a85d 100644
--- a/build-logic/build.gradle
+++ b/build-logic/build.gradle
@@ -34,6 +34,8 @@ dependencies {
implementation 'com.github.spotbugs.snom:spotbugs-gradle-plugin:6.2.4'
implementation 'me.champeau.jmh:jmh-gradle-plugin:0.7.2'
implementation 'org.cyclonedx:cyclonedx-gradle-plugin:2.4.0'
+ implementation "com.fasterxml.jackson:jackson-bom:2.20.0" // later version
for cyclonedx
+ implementation "org.slf4j:slf4j-api:2.0.17" // later version for cyclonedx
implementation 'org.apache.maven:maven-core:3.9.11'
}
diff --git a/gradle/verification-metadata.xml b/gradle/verification-metadata.xml
index 7083cbd473..d3cff1d9a3 100644
--- a/gradle/verification-metadata.xml
+++ b/gradle/verification-metadata.xml
@@ -72,6 +72,7 @@
<ignored-key id="6A0975F8B1127B83" reason="Key couldn't be downloaded
from any key server"/>
<ignored-key id="6C70A3B7599C5736" reason="Key couldn't be downloaded
from any key server"/>
<ignored-key id="6D9567281201E5E3" reason="Key couldn't be downloaded
from any key server"/>
+ <ignored-key id="6FD54E1F311B47E9" reason="Key couldn't be downloaded
from any key server"/>
<ignored-key id="72FEFD1572EB75E1" reason="Key couldn't be downloaded
from any key server"/>
<ignored-key id="734AEF3D43509290" reason="Key couldn't be downloaded
from any key server"/>
<ignored-key id="74DAFDFD6DAE2441" reason="Key couldn't be downloaded
from any key server"/>
@@ -291,77 +292,57 @@
<sha512
value="72c9beb5d282ecdebadbd595c4f05710599328e48432dc196a261d8973ec767d52038e5bd26e7c0b78b85b4455687d59f9d0a367221e848e39c72f2f583baf26"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
</artifact>
</component>
- <component group="com.eed3si9n.jarjar" name="ant-jarjar"
version="1.14.1">
- <artifact name="ant-jarjar-1.14.1.jar">
+ <component group="com.eed3si9n.jarjar" name="ant-jarjar"
version="1.15.0">
+ <artifact name="ant-jarjar-1.15.0.jar">
<pgp value="EA313384CA0EBA950EA017E937890E298D9A2BFA"/>
- <sha512
value="95603ab6dde87558cb844ebcc5d54e41f4a1a40d54f6cab3bf6dc1df3b4d7f6584b3bd0ac1da99345d05c8ca2e5de984544ab2055cc75f04f171a7c842e4d036"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ <sha512
value="6ea419d463369b8cd956235a6bfed7490c3446daf067cc3929f057d73a60c3de58538fa82c00bff95f806c24aa7d8f3e11ed80ec3a243436fa12eed7d4cc6716"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
</artifact>
</component>
- <component group="com.eed3si9n.jarjar" name="jarjar" version="1.14.1">
- <artifact name="jarjar-1.14.1.jar">
+ <component group="com.eed3si9n.jarjar" name="jarjar" version="1.15.0">
+ <artifact name="jarjar-1.15.0.jar">
<pgp value="EA313384CA0EBA950EA017E937890E298D9A2BFA"/>
- <sha512
value="b4e8117e811a5d88e4df67ac7813ea1b5161d431b10836c3b09c20604a3d7551df846d476b6114ae700d913cd82e0d45a1be9d8a8dc7706e18d1d35c428defcd"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ <sha512
value="cbf03668b3ae43c163ab74acec3081c0c714098387ab432c4468aec6b25d0b3a5a3c9a9b7be94e7801c56f86544294d38f8afa81518c9e824b433d2aede76059"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
</artifact>
</component>
- <component group="com.ethlo.time" name="itu" version="1.10.2">
- <artifact name="itu-1.10.2.jar">
- <sha512
value="cd109e39af788d88543f0867fff48adefe23b01a77b4a5f1963b117b125b71c9613ba3009f69d8f1131f5066689e3f43457cc2a8f02e827f40502b5e13bc3794"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ <component group="com.ethlo.time" name="itu" version="1.10.3">
+ <artifact name="itu-1.10.3.jar">
+ <pgp value="B18679A17A21DE79FF9DE8B0636D10E7975B6E6F"/>
</artifact>
</component>
- <component group="com.fasterxml.jackson.core" name="jackson-annotations"
version="2.17.2">
- <artifact name="jackson-annotations-2.17.2.jar">
- <sha512
value="006d3a054b22daa7f378b005cc29b3544dc7f3b509176e0eac946e0a3bafa73b824bae61b5183b61938b19044d2142a285da2fce2ffdaef5bfe91b2d8dcb6804"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ <component group="com.fasterxml.jackson.core" name="jackson-annotations"
version="2.20">
+ <artifact name="jackson-annotations-2.20.jar">
+ <sha512
value="8926d89bfe7f427c7793f6af619249540f23f82eae055dd03d4cb163ff603a43dd6a3ebe43528d00789aed3df0dd2f10e08552fdec53e2691849b9769f57f0c9"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
</artifact>
</component>
- <component group="com.fasterxml.jackson.core" name="jackson-annotations"
version="2.19.2">
- <artifact name="jackson-annotations-2.19.2.jar">
- <sha512
value="809d23970fe4af6157cfdfd7a3f9b9ca3f80e790faadb3313db06155ca4fb61e34763a96194ce90d5aa25264dda1126428ac07837c99575eedf4273c27e449f3"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ <component group="com.fasterxml.jackson.core" name="jackson-core"
version="2.20.0">
+ <artifact name="jackson-core-2.20.0.jar">
+ <sha512
value="6fde805019901b0e6f6af56c48b60a08ead48e962e167308a3d8ed861470594a80e5c6aec340e7ce8dd12a32d8c0cbb46bc39bc381f027f5977953950e60b083"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
</artifact>
</component>
- <component group="com.fasterxml.jackson.core" name="jackson-core"
version="2.17.2">
- <artifact name="jackson-core-2.17.2.jar">
- <sha512
value="694ae3bf756421d925f833f59a6309c7748ac3a68b28ed4de8ce0d6f93347dfc19991d1106db911c7da78e20734e6f44a02caef751150378a6ffa638c80fc75b"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ <component group="com.fasterxml.jackson.core" name="jackson-databind"
version="2.20.0">
+ <artifact name="jackson-databind-2.20.0.jar">
+ <sha512
value="a26054199811282897116632dc5175a05c1cdc30ab15cfc13325cb6074568de7b8fec08cb28f28835d31c522296b2460ce144972a2c952cfb8fc7467e1fa4a44"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
</artifact>
</component>
- <component group="com.fasterxml.jackson.core" name="jackson-core"
version="2.19.2">
- <artifact name="jackson-core-2.19.2.jar">
- <sha512
value="d6d64ec09819bb901d59f34bf9c422e632fc8d094ff97fc53d695acbb0b81768f13e444061176e9e79ac1934e443ce9d1d5dce5104a662b64effa95ae5743032"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ <component group="com.fasterxml.jackson.dataformat"
name="jackson-dataformat-toml" version="2.20.0">
+ <artifact name="jackson-dataformat-toml-2.20.0.jar">
+ <sha512
value="f4e63f31414355ff9476a637a8ba96557dc70d70617718f951e1aac3d9ca9ad2c71602effb3162dfb36c9c6746aeea271cc694c814e2c302713b549c64104d8b"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
</artifact>
</component>
- <component group="com.fasterxml.jackson.core" name="jackson-databind"
version="2.17.2">
- <artifact name="jackson-databind-2.17.2.jar">
- <sha512
value="ec62267bf58aea531ec7f253e67974fac89e8aa61e7b54a7fb00edf3132ecb969b510630fd353adbbd2ab7d845a25702f168c296c57983a00bd6abc9ce3630f9"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ <component group="com.fasterxml.jackson.dataformat"
name="jackson-dataformat-xml" version="2.20.0">
+ <artifact name="jackson-dataformat-xml-2.20.0.jar">
+ <sha512
value="ea82090e98a65e24c5198b456a545d4e69e556850a3ecf02af0fa2ecc304828048a22e403b020d1a78df8c8cba0a4ffd224a06ba92bc68b7d52519d9ae155372"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
</artifact>
</component>
- <component group="com.fasterxml.jackson.core" name="jackson-databind"
version="2.19.2">
- <artifact name="jackson-databind-2.19.2.jar">
- <sha512
value="0533fea9a35a2e7b9267a62a39252d3ac5cf8ab0ff30057242831a1e17c23225b935f7c2ed64de7585ea83e56c32e26bb6078d9834654e047f1ca7b0ee00dd72"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ <component group="com.fasterxml.jackson.dataformat"
name="jackson-dataformat-yaml" version="2.20.0">
+ <artifact name="jackson-dataformat-yaml-2.20.0.jar">
+ <sha512
value="7db8a2b20c4e4c73962ae499e9b970bcba2e83ebf997d15c543fdb9eb5f96b5fccc84d3918c3019362fc5f0aec643e88a0ad2fb062b913a92dc5348fd85ba905"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
</artifact>
</component>
- <component group="com.fasterxml.jackson.dataformat"
name="jackson-dataformat-toml" version="2.19.2">
- <artifact name="jackson-dataformat-toml-2.19.2.jar">
- <sha512
value="72d6282fc2e55c889c5c80e26d8f2d5f9a68b49a44757545c3a8704b6b53999fb2d5166f0bda1c7bbf74202094d2cef464cd52c3b6e3be8ea706c2c828a1094f"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
- </artifact>
- </component>
- <component group="com.fasterxml.jackson.dataformat"
name="jackson-dataformat-xml" version="2.17.2">
- <artifact name="jackson-dataformat-xml-2.17.2.jar">
- <sha512
value="a422d577ae21ab75ea10f05e139f32b482f620a71c322b8ee112c60bfec433df51690e231f95a85476b507c8146728b6673ea1e129f79696c58a437cadfcd613"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
- </artifact>
- </component>
- <component group="com.fasterxml.jackson.dataformat"
name="jackson-dataformat-yaml" version="2.17.2">
- <artifact name="jackson-dataformat-yaml-2.17.2.jar">
- <sha512
value="c3f75fbddb17f968ba6fcf6c32db63e5e1520b123880b3a37b1933a777b84794faa09e1e71e80de49ed504068483e49d98eac26a276fff68c0ae51f7fc7dd7db"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
- </artifact>
- </component>
- <component group="com.fasterxml.jackson.dataformat"
name="jackson-dataformat-yaml" version="2.19.2">
- <artifact name="jackson-dataformat-yaml-2.19.2.jar">
- <sha512
value="1197233ed512631f43d78f2514216f57013a3648c37d0a69e92b7ffa6cf59f2a1010eac21ab59409ff2e9f50906976fb7152dfecd00b2097c511fe364288e1fe"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
- </artifact>
- </component>
- <component group="com.fasterxml.woodstox" name="woodstox-core"
version="6.7.0">
- <artifact name="woodstox-core-6.7.0.jar">
+ <component group="com.fasterxml.woodstox" name="woodstox-core"
version="7.1.1">
+ <artifact name="woodstox-core-7.1.1.jar">
<pgp value="28118C070CB22A0175A2E8D43D12CA2AC19F3181"/>
- <sha512
value="b1d9d02bdf4a6ef5132dc31ad515aa2f2180e1a199ac9c0db831fac5603be8ab16a57689a7e069ebf3de85c3c291d01e400c4aed59ca5f862187f898f70eaa79"
origin="Generated by Gradle" reason="Artifact is not signed"/>
+ <sha512
value="28105d6409766966123d4e212dba555c4776bfeb538093d3739ef113de5c6d6e92453aabc16915bfb76124a5dcc82b57f3cd13b42ea2e4038a4495285c642d3a"
origin="Generated by Gradle" reason="Artifact is not signed"/>
</artifact>
</component>
<component group="com.github.ben-manes" name="gradle-versions-plugin"
version="0.52.0">
@@ -536,10 +517,10 @@
<sha512
value="b6827d8de471682fd11744080663aea77612a03774e2ebcc3357c7c493d5df50d4ec9c8d52c4fcc928bdfdd75b62b40d3c60f184da8a7b8aba44c92afecee7a5"
origin="Generated by Gradle" reason="Artifact is not signed"/>
</artifact>
</component>
- <component group="com.networknt" name="json-schema-validator"
version="1.5.1">
- <artifact name="json-schema-validator-1.5.1.jar">
+ <component group="com.networknt" name="json-schema-validator"
version="1.5.6">
+ <artifact name="json-schema-validator-1.5.6.jar">
<pgp value="AEB1E1AEC035C66FA39589D13EFC46EE83C40224"/>
- <sha512
value="36fc5149213fea4d4e4aa2ef347270198487508615a1bb5588d97ad4749dbf9126ed7702c99c8b6514f2df925b0f1a6d194395f46ceff172e4b20135d2c51624"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ <sha512
value="a9bfd40b46ea8ab74977832338103fb0df45f75647d3dca894a30097bc1841b392209eef0f1c42780f3c9f4c81624a63652055eb7fac498f3bac6dc3f5045d0d"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
</artifact>
</component>
<component group="com.puppycrawl.tools" name="checkstyle"
version="10.26.1">
@@ -639,6 +620,16 @@
<pgp value="2DB4F1EF0FA761ECC4EA935C86FDC7E2A11262CB"/>
</artifact>
</component>
+ <component group="commons-codec" name="commons-codec" version="1.18.0">
+ <artifact name="commons-codec-1.18.0.jar">
+ <pgp value="2DB4F1EF0FA761ECC4EA935C86FDC7E2A11262CB"/>
+ </artifact>
+ </component>
+ <component group="commons-codec" name="commons-codec" version="1.19.0">
+ <artifact name="commons-codec-1.19.0.jar">
+ <pgp value="2DB4F1EF0FA761ECC4EA935C86FDC7E2A11262CB"/>
+ </artifact>
+ </component>
<component group="commons-collections" name="commons-collections"
version="3.2.2">
<artifact name="commons-collections-3.2.2.jar">
<pgp value="0CC641C3A62453AB390066C4A41F13C999945293"/>
@@ -1320,6 +1311,16 @@
<pgp value="851264C36365D4FF9427625F38362FD5CFA2668B"/>
</artifact>
</component>
+ <component group="org.cyclonedx" name="cyclonedx-core-java"
version="10.2.1">
+ <artifact name="cyclonedx-core-java-10.2.1.jar">
+ <sha512
value="a43be061a75cb1f3a5b175fbd41437b4c2360050993bcb3c85acc52168b9e96c41f8436f178c0a5156db09b80fa0dfd84db60f3d575bb3679bcac7c3c8a83375"
origin="Generated by Gradle" reason="A key couldn't be downloaded"/>
+ </artifact>
+ </component>
+ <component group="org.cyclonedx" name="cyclonedx-gradle-plugin"
version="2.4.0">
+ <artifact name="cyclonedx-gradle-plugin-2.4.0.jar">
+ <sha512
value="26f3c928669d6bef1724b99c74a065920d3fc8ffd004ac0001d3499cb683f4915a8318700f4dc218f0a7213a6d88eaa0ecc981f97be79292151806b210ae10f5"
origin="Generated by Gradle" reason="Artifact is not signed"/>
+ </artifact>
+ </component>
<component group="org.dom4j" name="dom4j" version="2.2.0">
<artifact name="dom4j-2.2.0.jar">
<pgp value="8F9A3C6D105B9F57844A721D79E193516BE7998F"/>
diff --git a/subprojects/groovy-yaml/build.gradle
b/subprojects/groovy-yaml/build.gradle
index 01daa16704..f5f0b2f45c 100644
--- a/subprojects/groovy-yaml/build.gradle
+++ b/subprojects/groovy-yaml/build.gradle
@@ -26,7 +26,7 @@ dependencies {
implementation
"com.fasterxml.jackson.core:jackson-databind:${versions.jackson}"
implementation projects.groovyJson
testImplementation projects.groovyTest
- testRuntimeOnly
"com.fasterxml.jackson.core:jackson-annotations:${versions.jackson}"
+ testRuntimeOnly
"com.fasterxml.jackson.core:jackson-annotations:${versions.jacksonAnnotations}"
testRuntimeOnly projects.groovyAnt // for JavadocAssertionTests
}
diff --git a/versions.properties b/versions.properties
index 4e6ba199eb..b51e4ccb48 100644
--- a/versions.properties
+++ b/versions.properties
@@ -29,7 +29,8 @@ commonsCli=1.10.0
commonsMath3=3.6.1
gpars=1.2.1
ivy=2.5.3
-jackson=2.19.2
+jackson=2.20.0
+jacksonAnnotations=2.20
jakartaServerPagesApi=3.1.1
jakartaServletApi=6.0.0
jansi=2.4.2
