dongjoon-hyun opened a new pull request, #60004:
URL: https://github.com/apache/spark/pull/60004

   ### What changes were proposed in this pull request?
   
   This PR aims to upgrade FasterXML Jackson to 2.22.4.
   
   ### Why are the changes needed?
   
   Jackson 2.22.4 is the latest patch release on the 2.22 line.
   
   - https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.22.4 
(2026-10-17)
     - Streaming
       - [#1683](https://github.com/FasterXML/jackson-core/issues/1683) 
`ReaderBasedJsonParser` accepts lone surrogates in `\uXXXX` escapes in field 
names
       - [#1744](https://github.com/FasterXML/jackson-core/issues/1744) 
`UTF8DataInputJsonParser` fails on JSON-escaped surrogate pairs in property 
names
       - [#1750](https://github.com/FasterXML/jackson-core/issues/1750) 
`ALLOW_UNESCAPED_CONTROL_CHARS` is ignored for single-quoted string values in 
UTF-8 byte parsers
       - [#1742](https://github.com/FasterXML/jackson-core/issues/1742), 
[#1746](https://github.com/FasterXML/jackson-core/issues/1746), 
[#1756](https://github.com/FasterXML/jackson-core/issues/1756) Non-blocking 
parser fixes for escaped surrogate pairs, leading decimal point numbers, and 
multi-byte UTF-8 characters after a backslash escape
       - [#1730](https://github.com/FasterXML/jackson-core/pull/1730) 
`FilteringGeneratorDelegate` handles embedded objects, typed arrays, and 
raw/binary values consistently
     - Databind
       - CVE-2026-110879 
[#6287](https://github.com/FasterXML/jackson-databind/pull/6287) Validate type 
parameters and array element types of type ids
       - [#6206](https://github.com/FasterXML/jackson-databind/pull/6206) 
Report a cycle through a `@JsonValue` accessor as a `DatabindException`
       - [#6227](https://github.com/FasterXML/jackson-databind/issues/6227) 
`BeanDescription.findProperties()` is not thread-safe on a shared, cached 
instance
       - [#6249](https://github.com/FasterXML/jackson-databind/pull/6249) Avoid 
an NPE when the parser reports `VALUE_STRING` with null text
     - CBOR
       - CVE-2026-106554 
[#821](https://github.com/FasterXML/jackson-dataformats-binary/issues/821) Grow 
the `CBORParser.TagList` backing array geometrically
   
   `jackson-annotations` stays at 2.22 as referenced by `jackson-bom` 2.22.4.
   
   ### Does this PR introduce _any_ user-facing change?
   
   No.
   
   ### How was this patch tested?
   
   Pass the CIs.
   
   ### Was this patch authored or co-authored using generative AI tooling?
   
   Generated-by: Claude Sonnet 5.5


-- 
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

To unsubscribe, e-mail: [email protected]

For queries about this service, please contact Infrastructure at:
[email protected]


---------------------------------------------------------------------
To unsubscribe, e-mail: [email protected]
For additional commands, e-mail: [email protected]

Reply via email to