Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

Bump jackson-databind to 2.13.2.2 via switching to BOM #10302

Merged
merged 1 commit into from
Mar 30, 2022
Merged

Bump jackson-databind to 2.13.2.2 via switching to BOM #10302

merged 1 commit into from
Mar 30, 2022

Commits on Mar 30, 2022

  1. Bump jackson-databind to 2.13.2.2 via switching to BOM 

    Individual libs in Jackson don't necessarily all get released at the same time. The BOM is the right way to ensure versions are all on latest. In this case, to get a CVE patched within databind. See FasterXML/jackson-databind#3428 for more detail
    @chadlwilson
    chadlwilson committed Mar 30, 2022
    Configuration menu
    Copy the full SHA
    f7c2a39 View commit details
    Browse the repository at this point in the history