The GitHub Actions job "Stage release candidate" on 
pekko-http.git/x1.5.0-M1-RC1 has succeeded.
Run started by GitHub user pjfanning (triggered by pjfanning).

Head commit for run:
953022da33bf44ee79997aa1892176d1649b0caa / akashchamp 
<[email protected]>
build: upgrade Jackson to 2.21.7 (1.5.x) (#1363)

* build: upgrade Jackson to 2.21.7 (1.4.x)

Motivation:
Jackson has fixed several CVEs in recent releases. The 1.4.x branch is on
2.21.5, while the latest 2.21.x patch release is 2.21.7.

Modification:
Bump jacksonDatabindVersion in project/Dependencies.scala from 2.21.5 to
2.21.7. jackson-dataformat-xml (test/docs) follows the same version.

Result:
pekko-http-jackson resolves jackson-databind and jackson-core 2.21.7, still on
the 2.21 line.

Tests:
- sbt "http-jackson/Test/testOnly 
org.apache.pekko.http.javadsl.marshallers.jackson.JacksonTest" - 6 passed, 0 
failed
- sbt http-jackson/dependencyTree - jackson-databind 2.21.7, jackson-core 2.21.7

References:
Fixes #1354

* ci: upgrade sbt/setup-sbt to 1.5.12

setup-sbt 1.5.7 pulls in an action that is no longer on the ASF allow
list, which fails the sbt-based CI jobs on the 1.5.x branch.

---------

Co-authored-by: PJ Fanning <[email protected]>

Report URL: https://github.com/apache/pekko-http/actions/runs/40832648341

With regards,
GitHub Actions via GitBox


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to