Bump version.com.fasterxml.jackson from 2.15.2 to 2.16.1 #4008
Conversation
![dependabot[bot]](https://avatars.githubusercontent.com/in/29110?s=60&v=4){kind=small}
Bumps `version.com.fasterxml.jackson` from 2.15.2 to 2.16.1. Updates `com.fasterxml.jackson.core:jackson-core` from 2.15.2 to 2.16.1 - [Commits](FasterXML/jackson-core@jackson-core-2.15.2...jackson-core-2.16.1) Updates `com.fasterxml.jackson.core:jackson-annotations` from 2.15.2 to 2.16.1 - [Commits](https://github.com/FasterXML/jackson/commits) Updates `com.fasterxml.jackson.core:jackson-databind` from 2.15.2 to 2.16.1 - [Commits](https://github.com/FasterXML/jackson/commits) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-core dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: com.fasterxml.jackson.core:jackson-annotations dependency-type: direct:production update-type: version-update:semver-minor - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
bot
added
dependencies
|
Thanks for your pull request! This pull request does not follow the contribution rules. Could you have a look? ❌ All commit messages should start with a JIRA issue key matching pattern › This message was automatically generated. |
1 similar comment
|
Thanks for your pull request! This pull request does not follow the contribution rules. Could you have a look? ❌ All commit messages should start with a JIRA issue key matching pattern › This message was automatically generated. |
|
@marko-bekhta We'd need to check whether we want to stick to 2.15... I know WildFly does, though I don't remember why: wildfly/wildfly#17653 (comment) |
|
I see that Avro (1.11.3) is using a 2.14.2 version of Jackson ... https://github.com/apache/avro/blob/35ff8b997738e4d983871902d47bfb67b3250734/lang/java/pom.xml#L41 so let's wait for some reply on the Wildfly side... |
|
Yeah I believe the Elasticsearch client is not updating its dependencies anyway. And it gets worse as for example they're still forcing us to use Apache HTTP Client 4 even though 5 has been out for a while :/ As for Avro... it's weird that they're on such on an old version. But as long as our tests pass, I'm not worried: we don't need much from Avro and I believe we have decent test coverage in this area. |
|
Closing in favour of #4026 to keep the version aligned with Wildfly. |
|
OK, I won't notify you again about this release, but will get in touch when a new version is available. You can also ignore all major, minor, or patch releases for a dependency by adding an If you change your mind, just re-open this PR and I'll resolve any conflicts on it. |
dependabot
bot
deleted the
dependabot/maven/version.com.fasterxml.jackson-2.16.1
branch
Bumps
version.com.fasterxml.jacksonfrom 2.15.2 to 2.16.1.Updates
com.fasterxml.jackson.core:jackson-corefrom 2.15.2 to 2.16.1Commits
249716c[maven-release-plugin] prepare release jackson-core-2.16.1125f5b2Prepare for 2.16.1 release1928b07Minor test improvementsaa5c887Minor tweaking post-merge wrt #11759fb3f21Add failing tests for #1173: parse error location (#1175)4eb4539Backport #1168 in 2.16(.1)571d4aeMerge branch '2.15' into 2.168f37646Update release notes wrt #1161 backport8f2f04efastdoubleparser 1.0.0 (#1163) (#1166)7f1c619Update release notes wrt #1161Updates
com.fasterxml.jackson.core:jackson-annotationsfrom 2.15.2 to 2.16.1Commits
Updates
com.fasterxml.jackson.core:jackson-databindfrom 2.15.2 to 2.16.1Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot mergewill merge this PR after your CI passes on it@dependabot squash and mergewill squash and merge this PR after your CI passes on it@dependabot cancel mergewill cancel a previously requested merge and block automerging@dependabot reopenwill reopen this PR if it is closed@dependabot closewill close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)