Repository navigation
Upgrade Jackson to latest 2.21.x (2.21.7) #1354
Description
The 1.x line (1.4.x branch) uses Jackson 2.21.5 (jackson-databind and jackson-dataformat-xml, via jacksonDatabindVersion in project/Dependencies.scala). The latest 2.21.x patch release is 2.21.7.
Jackson has fixed multiple CVEs in recent releases, so we should pick up the latest 2.21.x patch for 1.5.0. Staying on the 2.21 line keeps this a patch-level dependency change for users of pekko-http-jackson.
main is already on 2.22.3, so this only affects the 1.x branch.
Activity
build: upgrade Jackson to 2.21.7 (1.5.x) (#1363)
pjfanning commentedon Oct 26, 2026
#1363 merged