This is an automated email from the ASF dual-hosted git repository.
chia7712 pushed a commit to branch trunk
in repository https://gitbox.apache.org/repos/asf/kafka.git
The following commit(s) were added to refs/heads/trunk by this push:
new 4cf7397c19c MINOR: Bump Jackson to 2.21.4 (#22732)
4cf7397c19c is described below
commit 4cf7397c19cb295b096c9bc0a87334b5a39c6140
Author: Daniel Tschinder <[email protected]>
AuthorDate: Fri Jul 3 15:41:22 2026 +0200
MINOR: Bump Jackson to 2.21.4 (#22732)
To address
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-j3rv-43j4-c7qm
https://github.com/FasterXML/jackson-databind/security/advisories/GHSA-rmj7-2vxq-3g9f
Reviewers: Chia-Ping Tsai <[email protected]>
---
LICENSE-binary | 18 +++++++++---------
gradle/dependencies.gradle | 2 +-
2 files changed, 10 insertions(+), 10 deletions(-)
diff --git a/LICENSE-binary b/LICENSE-binary
index 16595ec5fd0..e7060ea52c3 100644
--- a/LICENSE-binary
+++ b/LICENSE-binary
@@ -213,15 +213,15 @@ License Version 2.0:
- commons-validator-1.10.1
- hash4j-0.22.0
- jackson-annotations-2.21
-- jackson-core-2.21.2
-- jackson-databind-2.21.2
-- jackson-dataformat-csv-2.21.2
-- jackson-dataformat-yaml-2.21.2
-- jackson-datatype-jdk8-2.21.2
-- jackson-jakarta-rs-base-2.21.2
-- jackson-jakarta-rs-json-provider-2.21.2
-- jackson-module-blackbird-2.21.2
-- jackson-module-jakarta-xmlbind-annotations-2.21.2
+- jackson-core-2.21.4
+- jackson-databind-2.21.4
+- jackson-dataformat-csv-2.21.4
+- jackson-dataformat-yaml-2.21.4
+- jackson-datatype-jdk8-2.21.4
+- jackson-jakarta-rs-base-2.21.4
+- jackson-jakarta-rs-json-provider-2.21.4
+- jackson-module-blackbird-2.21.4
+- jackson-module-jakarta-xmlbind-annotations-2.21.4
- jakarta.inject-api-2.0.1
- jakarta.validation-api-3.0.2
- javassist-3.30.2-GA
diff --git a/gradle/dependencies.gradle b/gradle/dependencies.gradle
index 1f29c5031fa..f8571e5f34e 100644
--- a/gradle/dependencies.gradle
+++ b/gradle/dependencies.gradle
@@ -62,7 +62,7 @@ versions += [
gradle: "9.4.1",
grgit: "5.3.3",
httpclient: "4.5.14",
- jackson: "2.21.2",
+ jackson: "2.21.4",
jacksonAnnotations: "2.21",
jacoco: "0.8.14",
javassist: "3.30.2-GA",
