Skip to content

Commit

Permalink
Upgrade to Jackson 2.13.2.1
Browse files Browse the repository at this point in the history
Closes gh-30743
  • Loading branch information
snicoll committed Apr 19, 2022
1 parent d3a70c3 commit 00b175b
Showing 1 changed file with 1 addition and 1 deletion.
2 changes: 1 addition & 1 deletion spring-boot-project/spring-boot-dependencies/build.gradle
Expand Up @@ -548,7 +548,7 @@ bom {
]
}
}
library("Jackson Bom", "2.13.2.20220328") {
library("Jackson Bom", "2.13.2.1") {
group("com.fasterxml.jackson") {
imports = [
"jackson-bom"
Expand Down

8 comments on commit 00b175b

@jpcmonster
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@snicoll quick Q, I suspect this actually 'downgrades' jackson-databind (2.13.2.2 -> 2.13.2.1) vs. the 2.6.6 release.
Is this expected?
https://mvnrepository.com/artifact/com.fasterxml.jackson/jackson-bom

@snicoll
Copy link
Member Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

It doesn't. 2.13.2.1 has been released after 2.13.2.20220328. I don't know where you see a 2.13.2.2 here (the previous version was a timestamp, not 2.

@sbologescu
Copy link

@sbologescu sbologescu commented on 00b175b Apr 25, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@snicoll , upgrading from springboot 2.6.6 to 2.6.7 changes jackson-databind dependency from 2.13.2.2 to 2.13.2.1

+--- org.springframework.boot:spring-boot-starter-web -> 2.6.7
|    +--- org.springframework.boot:spring-boot-starter:2.6.7 (*)
|    +--- org.springframework.boot:spring-boot-starter-json:2.6.7
|    |    +--- org.springframework.boot:spring-boot-starter:2.6.7 (*)
|    |    +--- org.springframework:spring-web:5.3.19 (*)
|    |    +--- com.fasterxml.jackson.core:jackson-databind:2.13.2.1

@jpcmonster
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

I may have missed something in my first report; I suspect we have an 'upstream' jackson-bom override in our project causing the discrepancy; investigating now.

@wilkinsona
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

This is an intentional change in Jackson's bom. See FasterXML/jackson-bom#52 (comment).

@jpcmonster
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

thx @wilkinsona I was just following those same breadcrumbs.

@breun
Copy link
Contributor

@breun breun commented on 00b175b Apr 26, 2022

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

So, upgrading from Spring Boot 2.6.6 to 2.6.7 indeed results in a downgrade from Jackson Databind 2.13.2.2 to 2.13.2.1.

@wilkinsona
Copy link
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

@breun Thanks, but we already know that. As I said above, it's intentional. Please see FasterXML/jackson-bom#52 for further details.

Please sign in to comment.