zhangshenghang opened a new pull request, #11256: URL: https://github.com/apache/seatunnel/pull/11256
### Purpose of this pull request This PR syncs the fix from WhaleOps/whaletunnel#2659 to Apache SeaTunnel. It upgrades Jackson from 2.13.3 to 2.15.4 to address security scan risks from the old Jackson version. ### Does this PR introduce _any_ user-facing change? No. This is a dependency maintenance change. ### How was this patch tested? - `./mvnw -pl seatunnel-shade/seatunnel-jackson help:evaluate -Dexpression=jackson.version -q -DforceStdout` -> `2.15.4` - `./mvnw help:evaluate -Dexpression=maven-shade-plugin.version -q -DforceStdout` -> `3.5.1` - `./mvnw spotless:apply` - `./mvnw -q -DskipTests verify` - `./mvnw -q -pl seatunnel-shade/seatunnel-jackson test` - `git diff --check` ### Notes Jackson 2.15.4 contains Java 21 multi-release classes in `jackson-core`. The existing `maven-shade-plugin` 3.4.1 cannot process those classes and fails with `Unsupported class file major version 65` while building `seatunnel-jackson`. Therefore this PR also upgrades `maven-shade-plugin` to 3.5.1, which keeps the build compatible with Jackson 2.15.4. -- This is an automated message from the Apache Git Service. To respond to the message, please log on to GitHub and use the URL above to go to the specific comment. To unsubscribe, e-mail: [email protected] For queries about this service, please contact Infrastructure at: [email protected]
