Upgrade fasterxml

[rakeshparuchuri]

No description provided.

[xiazcy]

Hi, thanks for opening the PR.

Could you clarify the reason for upgrading jackson-annotations, and why 2.15.0-rc1? We don't use release candidates, especially when there are newer official released versions.

Note that we are currently pinning jackson libraries to 2.13.x versions for compatibility reasons with Spark 2.3.3 (see comment on the pom file).

[rakeshparuchuri]

Hi, thanks for opening the PR.

Could you clarify the reason for upgrading jackson-annotations, and why 2.15.0-rc1? We don't use release candidates, especially when there are newer official released versions.

Note that we are currently pinning jackson libraries to 2.13.x versions for compatibility reasons with Spark 2.3.3 (see comment on the pom file).

thanks @xiazcy for the reply
I have upgraded the dependency since it was vulnerable to one of the High severity issue.

I was't aware that we cannot upgrade to release candidates. I am committing again by upgrading to official released version.

[kenhuuu]

Hi and thanks for contributing.

I was wondering what kind of testing you did for this PR. As noted earlier, it seems like this version was pinned for a reason. Have you looked into any potential issues with Spark/Scala if you change this Jackson version?