[
https://issues.apache.org/jira/browse/AVRO-3754?page=com.atlassian.jira.plugin.system.issuetabpanels:comment-tabpanel&focusedCommentId=17754714#comment-17754714
]
PJ Fanning commented on AVRO-3754:
----------------------------------
[~clesaec] v2.15.2 has a few fixes - definitely better than v2.15.0.
The key problem with libs that use Jackson 2.15 is that they need to consider
exposing a way for users of their lib to configure the ObjectMappers that the
lib creates. By default, Jackson 2.15 applies a
[StreamReadConstraints|https://javadoc.io/static/com.fasterxml.jackson.core/jackson-core/2.15.2/com/fasterxml/jackson/core/StreamReadConstraints.html]
that will fail if you try to read JSON with excessively long strings or
numbers of if the JSON is too deeply nested.
> upgrade to jackson 2.15.0
> -------------------------
>
> Key: AVRO-3754
> URL: https://issues.apache.org/jira/browse/AVRO-3754
> Project: Apache Avro
> Issue Type: Task
> Components: java
> Reporter: PJ Fanning
> Priority: Major
>
> There is a already a dependabot PR that has been merged.
> [https://github.com/apache/avro/pull/2208]
> I'm a Jackson committer and I'd like to highlight that there are some big
> changes in Jackson 2.15.0 and unfortunately, they are causing some problems
> for some users.
> [https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.15]
> I have commented on the PR (2208) about my concerns. I would discourage Avro
> team from making an Avro release with Jackson 2.15.0 as a dependency and I
> think you really need to consider the impact of the
> [StreamReadConstraints|https://javadoc.io/static/com.fasterxml.jackson.core/jackson-core/2.15.0/com/fasterxml/jackson/core/StreamReadConstraints.html]
> changes in particular.
--
This message was sent by Atlassian Jira
(v8.20.10#820010)
