Skip to content

Bump com.squareup.retrofit2:converter-jackson from 2.11.0 to 3.0.0 - #201

Closed
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/com.squareup.retrofit2-converter-jackson-3.0.0
Closed

Bump com.squareup.retrofit2:converter-jackson from 2.11.0 to 3.0.0#201
dependabot[bot] wants to merge 1 commit into
mainfrom
dependabot/maven/com.squareup.retrofit2-converter-jackson-3.0.0

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Sep 12, 2026 •
edited
Loading

Copy link
Copy Markdown
Contributor

Bumps com.squareup.retrofit2:converter-jackson from 2.11.0 to 3.0.0.

Release notes

Sourced from com.squareup.retrofit2:converter-jackson's releases.

3.0.0

Changed

  • Upgrade to OkHttp 4.12 (from 3.14).

    This is the version of OkHttp that is written in Kotlin, and as a result Retrofit now has a transitive Kotlin dependency. However, this is also the supported version of OkHttp whereas the previous version was out of support for nearly 4 years.

Note: The 3.x versions of Retrofit maintain forward binary-compatibility with the 2.x versions. This means libraries compiled against 2.x can still be used with the 3.x versions.

2.12.0

New

  • First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

    The following converters support this feature through a new withStreaming() factory method:

    • Gson
    • Jackson
    • Moshi
    • Protobuf
    • Wire

Fixed

  • Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.
Changelog

Sourced from com.squareup.retrofit2:converter-jackson's changelog.

3.0.0 - 2025-05-15

Changed

  • Upgrade to OkHttp 4.12 (from 3.14).

    This is the version of OkHttp that is written in Kotlin, and as a result Retrofit now has a transitive Kotlin dependency. However, this is also the supported version of OkHttp whereas the previous version was out of support for nearly 4 years.

Note: The 3.x versions of Retrofit maintain forward binary-compatibility with the 2.x versions. This means libraries compiled against 2.x can still be used with the 3.x versions.

2.12.0 - 2025-05-15

New

  • First-party converters now support deferring serialization to happen when the request body is written (i.e., during HTTP execution) rather than when the HTTP request is created. In some cases this moves conversion from a calling thread to a background thread, such as in the case when using Call.enqueue directly.

    The following converters support this feature through a new withStreaming() factory method:

    • Gson
    • Jackson
    • Moshi
    • Protobuf
    • Wire

Fixed

  • Primitive types used with @Tag now work by storing the value boxed with the boxed class as the key.
Commits

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Sep 12, 2026
@dependabot
Bump com.squareup.retrofit2:converter-jackson from 2.11.0 to 3.0.0
32c200b 
Bumps [com.squareup.retrofit2:converter-jackson](https://github.com/square/retrofit) from 2.11.0 to 3.0.0.
- [Release notes](https://github.com/square/retrofit/releases)
- [Changelog](https://github.com/lysine-dev/retrofit/blob/trunk/CHANGELOG.md)
- [Commits](lysine-dev/retrofit@2.11.0...3.0.0)

---
updated-dependencies:
- dependency-name: com.squareup.retrofit2:converter-jackson
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/com.squareup.retrofit2-converter-jackson-3.0.0 branch from ad1cafa to 32c200b Compare September 12, 2026 11:52
@edridudi edridudi mentioned this pull request Sep 12, 2026
Merged
edridudi added a commit that referenced this pull request Sep 12, 2026
@edridudi dudiedri @claude
Bump lombok, slf4j and the compiler/source plugins (#204)
31ff7aa 
Batches four dependabot proposals that build and test cleanly together:

  lombok                1.18.36 -> 1.18.48   (#202)
  slf4j-reload4j        2.0.16  -> 2.0.19    (#200)
  maven-compiler-plugin 3.13.0  -> 3.16.0    (#199)
  maven-source-plugin   3.3.1   -> 3.4.0     (#198)

slf4j-api moves to 2.0.19 as well, which #200 left behind — the api and
the reload4j binding are meant to stay in step.

Note that lombok 1.18.48 still does not support JDK 25: compiling there
fails with the annotation processor silently not running. JDK 21 remains
the supported local build.

Retrofit 3.0.0 (#201) is deliberately not included - retrofit.version
drives both retrofit and converter-jackson, so it is a major bump of the
HTTP layer and wants its own change.

Co-authored-by: dudiedri <dudi.edri@ox.security>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
This was referenced Sep 12, 2026
Closed
Merged
edridudi pushed a commit that referenced this pull request Sep 12, 2026
dudiedri @claude
Bump retrofit to 3.0.0 and release as 1.22.1
52e9a39 
retrofit.version drives both retrofit and converter-jackson, so this moves
the whole HTTP layer to the 3.x line, which is where maintenance now goes.

The transitive effect is smaller than it first appears: kotlin-stdlib is
already a compile dependency via logging-interceptor (1.8.21), so retrofit
3 upgrades it to 2.1.21 rather than introducing Kotlin to consumers.

BaseService exposes retrofit2.Retrofit through getRetrofit(), so consumers
using that accessor while pinning retrofit 2 will conflict.

Supersedes #201, which proposed the same bump but could not be built -
fork PRs do not trigger the workflows here.

Co-Authored-By: Claude Opus 5 <noreply@anthropic.com>
edridudi added a commit that referenced this pull request Sep 12, 2026
@edridudi dudiedri @claude
Bump retrofit to 3.0.0 and release as 1.22.1 (#209)
fd27042 
retrofit.version drives both retrofit and converter-jackson, so this moves
the whole HTTP layer to the 3.x line, which is where maintenance now goes.

The transitive effect is smaller than it first appears: kotlin-stdlib is
already a compile dependency via logging-interceptor (1.8.21), so retrofit
3 upgrades it to 2.1.21 rather than introducing Kotlin to consumers.

BaseService exposes retrofit2.Retrofit through getRetrofit(), so consumers
using that accessor while pinning retrofit 2 will conflict.

Supersedes #201, which proposed the same bump but could not be built -
fork PRs do not trigger the workflows here.

Co-authored-by: dudiedri <dudi.edri@ox.security>
Co-authored-by: Claude Opus 5 <noreply@anthropic.com>
@edridudi

edridudi commented Sep 12, 2026

Copy link
Copy Markdown
Collaborator

Superseded by #209, merged as fd27042 — same bump, rebased onto current main, released as 1.22.1.

Worth recording what the investigation found, since it is the usual objection to this upgrade: kotlin-stdlib is already a compile dependency via logging-interceptor (1.8.21), so retrofit 3 upgrades it to 2.1.21 rather than introducing Kotlin to consumers.

Note also that retrofit.version drives both retrofit and converter-jackson, so this was a bump of the whole HTTP layer, not just the converter in the title.

Verified with 139 tests including the MockWebServer suite, which exercises the Retrofit/OkHttp/Jackson stack directly. This PR could not be built here — fork PRs do not trigger the workflows.

@edridudi edridudi closed this Sep 12, 2026
@dependabot @github

dependabot Bot commented on behalf of github Sep 12, 2026

Copy link
Copy Markdown
Contributor Author

OK, I won't notify you again about this release, but will get in touch when a new version is available. If you'd rather skip all updates until the next major or minor version, let me know by commenting @dependabot ignore this major version or @dependabot ignore this minor version. You can also ignore all major, minor, or patch releases for a dependency by adding an ignore condition with the desired update_types to your config file.

If you change your mind, just re-open this PR and I'll resolve any conflicts on it.

@dependabot
dependabot Bot deleted the dependabot/maven/com.squareup.retrofit2-converter-jackson-3.0.0 branch September 12, 2026 18:57
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Reviewers

No reviews

Assignees

No one assigned

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Milestone

No milestone

Development

Successfully merging this pull request may close these issues.

1 participant

@edridudi