The GitHub Actions job "Link Validator" on pekko-http.git/jackson-2.21.7-1.4.x 
has failed.
Run started by GitHub user akashchamp (triggered by He-Pin).

Head commit for run:
236313b80cb194670235514a78e107d575a6098d / Akash Kumar 
<[email protected]>
build: upgrade Jackson to 2.21.7 (1.4.x)

Motivation:
Jackson has fixed several CVEs in recent releases. The 1.4.x branch is on
2.21.5, while the latest 2.21.x patch release is 2.21.7.

Modification:
Bump jacksonDatabindVersion in project/Dependencies.scala from 2.21.5 to
2.21.7. jackson-dataformat-xml (test/docs) follows the same version.

Result:
pekko-http-jackson resolves jackson-databind and jackson-core 2.21.7, still on
the 2.21 line.

Tests:
- sbt "http-jackson/Test/testOnly 
org.apache.pekko.http.javadsl.marshallers.jackson.JacksonTest" - 6 passed, 0 
failed
- sbt http-jackson/dependencyTree - jackson-databind 2.21.7, jackson-core 2.21.7

References:
Fixes #1354

Report URL: https://github.com/apache/pekko-http/actions/runs/39823110264

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to