Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

security: upgrade jackson version #6338

Merged
merged 5 commits into from
Feb 12, 2025
Merged

Conversation

slievrly
Copy link
Member

@slievrly slievrly commented Feb 6, 2024

  • I have registered the PR changes.

Ⅰ. Describe what this PR did

upgrade jackson version

fix dependency security:
MPS-2022-58653
MPS-2022-58654
MPS-z1bx-p8y2

Ⅱ. Does this pull request fix one issue?

fixes #6287

Ⅲ. Why don't you add test cases (unit test/integration test)?

Ⅳ. Describe how to verify it

Ⅴ. Special notes for reviews

@slievrly slievrly added this to the 2.1.0 milestone Feb 6, 2024
Copy link
Contributor

@funky-eyes funky-eyes left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@slievrly slievrly added the Do Not Merge Do not merge into develop label Feb 6, 2024
@slievrly slievrly removed this from the 2.1.0 milestone Mar 2, 2024
@Akshaypa91 Akshaypa91 mentioned this pull request Feb 11, 2025
Copy link

codecov bot commented Feb 12, 2025

Codecov Report

All modified and coverable lines are covered by tests ✅

Project coverage is 52.23%. Comparing base (2055817) to head (2716778).
Report is 1 commits behind head on 2.x.

Additional details and impacted files

Impacted file tree graph

@@             Coverage Diff              @@
##                2.x    #6338      +/-   ##
============================================
+ Coverage     51.76%   52.23%   +0.47%     
- Complexity     6754     6796      +42     
============================================
  Files          1151     1151              
  Lines         40975    40975              
  Branches       4803     4803              
============================================
+ Hits          21212    21405     +193     
+ Misses        17767    17539     -228     
- Partials       1996     2031      +35     

see 40 files with indirect coverage changes

@funky-eyes funky-eyes added dependencies Pull requests that update a dependency file and removed Do Not Merge Do not merge into develop labels Feb 12, 2025
@funky-eyes funky-eyes added this to the 2.4.0 milestone Feb 12, 2025
Copy link
Member

@xingfudeshi xingfudeshi left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

@xingfudeshi xingfudeshi merged commit bfe6983 into apache:2.x Feb 12, 2025
8 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Development

Successfully merging this pull request may close these issues.

feature: jackson dependencey was provided, compile is better
3 participants