This is an automated email from the ASF dual-hosted git repository.
gitgabrio pushed a commit to branch main
in repository https://gitbox.apache.org/repos/asf/incubator-kie-drools.git
The following commit(s) were added to refs/heads/main by this push:
new 74c9d9290ed NO-ISSUE: override jackson-databind to 2.22.0 in
optaplanner-build-parent to fix cve (#6811)
74c9d9290ed is described below
commit 74c9d9290ed646ef369568f75bce7368bf381a55
Author: athirakm94 <[email protected]>
AuthorDate: Fri Jul 17 15:13:17 2026 +0530
NO-ISSUE: override jackson-databind to 2.22.0 in optaplanner-build-parent
to fix cve (#6811)
* fix: override jackson-databind to 2.22.0 in optaplanner-build-parent to
override quarkus-bom
* fix: move jackson-databind version property to Normal dependency versions
section and clarify transitive importers
---
optaplanner-build/optaplanner-build-parent/pom.xml | 8 ++++++++
1 file changed, 8 insertions(+)
diff --git a/optaplanner-build/optaplanner-build-parent/pom.xml
b/optaplanner-build/optaplanner-build-parent/pom.xml
index 086194282cb..ac422df0497 100644
--- a/optaplanner-build/optaplanner-build-parent/pom.xml
+++ b/optaplanner-build/optaplanner-build-parent/pom.xml
@@ -59,6 +59,7 @@
<version.org.slf4j>2.0.17</version.org.slf4j><!-- TODO keep in sync with
quarkus-bom -->
<version.org.springframework>7.0.8</version.org.springframework>
<version.org.springframework.boot>4.0.7</version.org.springframework.boot>
+
<version.com.fasterxml.jackson.databind>2.22.0</version.com.fasterxml.jackson.databind>
<!--
************************************************************************ -->
<!-- Plugins -->
@@ -201,6 +202,13 @@
<artifactId>spring-boot-persistence</artifactId>
<version>${version.org.springframework.boot}</version>
</dependency>
+ <!-- Override quarkus-bom jackson-databind version; transitively
imported by
+ optaplanner-persistence-jackson,
optaplanner-spring-boot-autoconfigure and optaplanner-quarkus-jackson -->
+ <dependency>
+ <groupId>com.fasterxml.jackson.core</groupId>
+ <artifactId>jackson-databind</artifactId>
+ <version>${version.com.fasterxml.jackson.databind}</version>
+ </dependency>
</dependencies>
</dependencyManagement>
---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]
