As said before I would like to update Jackson to a more reasonable version. Going to 2.14 will be the most future proof but we should still make sure to understand what happens to code bases that use Jackson 2.12 or 2.13. Do we have any idea what it will mean? Do we have escape hatches if it does not work out for lots of users?
On Mon, Apr 3, 2023 at 6:53 PM Matthew Benedict de Detrich <[email protected]> wrote: > > Since this has been sitting here for a week for no objections shall we wait > for a couple more days and then merge? > > On Mon, Mar 27, 2023 at 7:45 PM PJ Fanning <[email protected]> wrote: > > > Hi everyone, > > > > We've hit issues with our Cassandra Driver jar needing a newer version of > > Jackson than we currently use in main Pekko repo. > > > > So far, most people who've commented on GitHub are supportive of upgrading > > Jackson. The latest v2.14.2 release of jackson-module-scala needs Scala > > upgrade to v3.2.2. See Scala discussion [1]. > > > > Another benefit to upgrading Jackson is that v2.11.4 has CVEs associated > > with it. > > > > The Jackson PR is here [2]. > > > > Does anyone have any objections? > > > > > > [1] https://lists.apache.org/thread/mk88ybzx51k7x7x102drtbzh6l68k0xm > > [2] https://github.com/apache/incubator-pekko/pull/273 > > > > --------------------------------------------------------------------- > > To unsubscribe, e-mail: [email protected] > > For additional commands, e-mail: [email protected] > > > > > > -- > > Matthew de Detrich > > *Aiven Deutschland GmbH* > > Immanuelkirchstraße 26, 10405 Berlin > > Amtsgericht Charlottenburg, HRB 209739 B > > Geschäftsführer: Oskari Saarenmaa & Hannu Valtonen > > *m:* +491603708037 > > *w:* aiven.io *e:* [email protected] --------------------------------------------------------------------- To unsubscribe, e-mail: [email protected] For additional commands, e-mail: [email protected]
