-
Notifications
You must be signed in to change notification settings - Fork 1.1k
New issue
Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.
By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.
Already on GitHub? Sign in to your account
Update jackson #7146
Update jackson #7146
Conversation
@melix can you take a look at how to do this? 2.13.2.1 was only released for the jackson-databind artifact, but the build is failing with missing 2.13.2.1 bom. not sure where that comes from or how to fix it. |
Apparently we're not the only ones with this problem: FasterXML/jackson-databind#3428 |
Right, so it's wrong metadata published on the Jackson side. We can fix it locally via a component metadata rule, but it wouldn't be propagated to our users. Alternatively, we can add a constraint which would fix this problem but should be removed once a new version of Jackson which fixes the problem is released: dependencies {
constraints {
api('com.fasterxml.jackson:jackson-bom') {
version {
strictly '[2.13.2, 2.13.3['
prefer '2.13.2'
reject '2.13.2.1'
}
because 'Jackson Databind references non existent BOM'
}
}
} |
ok i will wait a few days and if tatu fixes it on jacksons side we can update to 2.13.2.2, else use the workaround |
Note however that if we publish this and that 2.13.2.1 BOM is finally published, then we would never get it, which is probably not acceptable. So maybe wait for an official answer from the Jackson folks. |
Kudos, SonarCloud Quality Gate passed! |
Issue seems to be fixed now. |
@sdelamo please review and merge this before releasing 3.4.1. |
@yawkat thanks for being on top of this. |
No description provided.