Skip to content

chore: bump com.fasterxml.jackson.core:jackson-core from 2.21.1 to 2.21.4 - #1095

Open
dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/gradle/com.fasterxml.jackson.core-jackson-core-2.21.4
Open

dependabot[bot] wants to merge 1 commit into
developmentfrom
dependabot/gradle/com.fasterxml.jackson.core-jackson-core-2.21.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Jul 22, 2026

Copy link
Copy Markdown
Contributor

Bumps com.fasterxml.jackson.core:jackson-core from 2.21.1 to 2.21.4.

Commits
  • f17a4f7 [maven-release-plugin] prepare release jackson-core-2.21.4
  • c6411e1 Prep for 2.21.4 release
  • 52633da Merge branch '2.20' into 2.21
  • 1fa7bb9 Merge branch '2.19' into 2.20
  • 6dea8a8 Merge branch '2.18' into 2.19
  • ada244d Post-release dep version bump
  • 52f69d3 [maven-release-plugin] prepare for next development iteration
  • 899d70a [maven-release-plugin] prepare release jackson-core-2.18.8
  • a006b52 Prep for 2.18.8 release
  • 4c05816 Merge branch '2.20' into 2.21
  • Additional commits viewable in compare view

Note
Automatic rebases have been disabled on this pull request as it has been open for over 30 days.

@dependabot dependabot Bot added dependencies Dependencies update java Pull requests that update java code labels Jul 22, 2026
@dependabot dependabot Bot added dependencies Dependencies update java Pull requests that update java code labels Jul 22, 2026
@dependabot
dependabot Bot force-pushed the dependabot/gradle/com.fasterxml.jackson.core-jackson-core-2.21.4 branch from c82675a to d22cc7c Compare July 24, 2026 13:56
@dependabot
dependabot Bot force-pushed the dependabot/gradle/com.fasterxml.jackson.core-jackson-core-2.21.4 branch from d22cc7c to 50601cb Compare July 31, 2026 10:09
@dependabot
dependabot Bot force-pushed the dependabot/gradle/com.fasterxml.jackson.core-jackson-core-2.21.4 branch from 50601cb to 6ab9a34 Compare August 4, 2026 10:32
@ai-dial-actions

This comment has been minimized.

@dependabot
dependabot Bot force-pushed the dependabot/gradle/com.fasterxml.jackson.core-jackson-core-2.21.4 branch from 6ab9a34 to 26922f4 Compare August 10, 2026 14:36
@ai-dial-actions

This comment has been minimized.

@dependabot
dependabot Bot force-pushed the dependabot/gradle/com.fasterxml.jackson.core-jackson-core-2.21.4 branch from 26922f4 to eadb656 Compare August 11, 2026 08:41
@ai-dial-actions

This comment has been minimized.

@dependabot
dependabot Bot force-pushed the dependabot/gradle/com.fasterxml.jackson.core-jackson-core-2.21.4 branch from eadb656 to c72def0 Compare August 11, 2026 10:25
@ai-dial-actions

This comment has been minimized.

Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.21.1 to 2.21.4.
- [Commits](FasterXML/jackson-core@jackson-core-2.21.1...jackson-core-2.21.4)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.21.4
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/gradle/com.fasterxml.jackson.core-jackson-core-2.21.4 branch from c72def0 to 4646d6b Compare August 11, 2026 10:46
@ai-dial-actions

Copy link
Copy Markdown
Contributor

Dependency Review

The following issues were found:
  • ❌ 1 vulnerable package(s)
  • ✅ 0 package(s) with incompatible licenses
  • ✅ 0 package(s) with invalid SPDX license definitions
  • ✅ 0 package(s) with unknown licenses.
See the Details below.

Vulnerabilities

settings.gradle

NameVersionVulnerabilitySeverityPatched Version
com.fasterxml.jackson.core:jackson-databind2.21.4jackson-databind has case-insensitive deserialization bypasses per-property @JsonIgnorePropertiesmoderate2.21.5
jackson-databind: `@JsonView` bypass for creator properties with `@JsonTypeInfo(include=As.EXTERNAL_PROPERTY)`moderate2.21.5
jackson-databind: @JsonView bypassed for @JsonUnwrapped container properties on deserializationmoderate2.21.5

OpenSSF Scorecard

PackageVersionScoreDetails
maven/com.fasterxml.jackson.core:jackson-databind 2.21.4 UnknownUnknown
maven/com.fasterxml.jackson.core:jackson-core 2.21.4 UnknownUnknown
maven/com.fasterxml.jackson.dataformat:jackson-dataformat-toml 2.21.4 UnknownUnknown
maven/com.fasterxml.jackson.dataformat:jackson-dataformat-yaml 2.21.4 UnknownUnknown
maven/com.fasterxml.jackson.datatype:jackson-datatype-jdk8 2.21.4 UnknownUnknown
maven/com.fasterxml.jackson.datatype:jackson-datatype-jsr310 2.21.4 UnknownUnknown
maven/com.fasterxml.jackson.module:jackson-module-parameter-names 2.21.4 UnknownUnknown
maven/com.fasterxml.jackson:jackson-bom 2.21.4 UnknownUnknown

Scanned Files

  • settings.gradle

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Dependencies update java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant