Thank you On Sun, Mar 25, 2018 at 11:13 AM, Claus Ibsen <claus.ib...@gmail.com> wrote:
> Master will be upgraded to 2.9.x as part of the Spring Boot 2 upgrade. > > > > On Sun, Mar 25, 2018 at 5:08 PM, Darius Cooper <dariuscoo...@gmail.com> > wrote: > > Yes, I was thinking about 2.20.x > > > > But, I thought the same could be done in the ongoing master, since that > > uses 2.8.10 of jackson-databind at this point? > > > > On Sat, Mar 24, 2018 at 5:10 AM, Andrea Cosentino < > > ancosen1...@yahoo.com.invalid> wrote: > > > >> Do you mean on 2.20.x? Yeah, upgrade of this kind are welcome > >> > >> Inviato da Yahoo Mail su Android > >> > >> Il sab, 24 mar, 2018 alle 9:07, Claus Ibsen<claus.ib...@gmail.com> ha > >> scritto: Hi > >> > >> Yeah sure you can submit a PR to update that. > >> We generally always want to update to newer patch releases. > >> > >> > >> On Sat, Mar 24, 2018 at 1:25 AM, Darius Cooper <dariuscoo...@gmail.com> > >> wrote: > >> > What is Camel's policy on upgrading versions of dependencies used? For > >> > example, is there any policy that says that dependencies will not be > >> > upgraded with minor version number increments, or path increments, or > >> some > >> > such? > >> > > >> > Example: > >> > Camel 2.20.x uses jackson-databind 2.8.10 > >> > > >> > I see a comment in Camel code that jackson-datbind 2.9.x does not work > >> well > >> > the Camel swagger component. > >> > > >> > Meanwhile, jackson-databind has a 2.8.11.1 , which fixes some reported > >> > vulnerabilities. > >> > > >> > Would the Camel team be open to going to the latest 2.8.x version of > >> > jackson-databind? > >> > >> > >> > >> -- > >> Claus Ibsen > >> ----------------- > >> http://davsclaus.com @davsclaus > >> Camel in Action 2: https://www.manning.com/ibsen2 > >> > >> > > > > -- > Claus Ibsen > ----------------- > http://davsclaus.com @davsclaus > Camel in Action 2: https://www.manning.com/ibsen2 >
