Update jackson to 2.21.6 - #19442
Conversation
🤖 GitHub commentsJust comment with:
|
There was a problem hiding this comment.
Pull request overview
This PR updates Logstash core’s Jackson dependencies to the latest 2.21 LTS patch release and adjusts the repository’s notice text for the affected Jackson artifacts.
Changes:
- Bump
jacksonandjackson-databindfrom2.21.4to2.21.6, and bumpjrjacksonfrom0.5.2to0.5.3inversions.yml. - Update
NOTICE.TXTentries for Jackson artifacts to reflect2.21.6.
Reviewed changes
Copilot reviewed 2 out of 2 changed files in this pull request and generated 1 comment.
| File | Description |
|---|---|
versions.yml |
Updates the single source-of-truth versions for Jackson and JrJackson used by core build/gemspec wiring. |
NOTICE.TXT |
Updates notice headers for Jackson components to match the new 2.21.6 versions. |
💡 Add a code-review agent skill or configure MCP servers for context-aware, tailored reviews. Learn more in the docs.
| jrjackson: 0.5.3 | ||
| jackson: 2.21.6 | ||
| jackson-databind: 2.21.6 |
|
This pull request does not have a backport label. Could you fix it @donoghuc? 🙏
|
TL;DRBuildkite failures are caused by dependency resolution during Remediation
Investigation detailsRoot Cause
Evidence
Verification
Follow-upIf the intent is to consume newer Jackson artifacts, keep Jackson updates but align to a released What is this? | From workflow: PR Buildkite Detective Give us feedback! React with 🚀 if perfect, 👍 if helpful, 👎 if not. |
yaauie
left a comment
There was a problem hiding this comment.
As noted by copilot, the notice for jrJackson will need to be updated. Other than that, LGTM.
There was a problem hiding this comment.
Pull request overview
Copilot reviewed 2 out of 2 changed files in this pull request and generated no new comments.
Suppressed comments (1)
NOTICE.TXT:3931
- NOTICE.TXT appears to be generated by the dependencies audit tool from per-dependency notice templates (see tools/dependencies-report/README.md:9-11). This PR updates the jrjackson notice here to v0.5.3, but the source template tools/dependencies-report/src/main/resources/notices/jrjackson-NOTICE.txt still points to v0.4.6, so regenerating NOTICE.TXT would revert this change.
Notice for: jrjackson-0.5.3
----------
https://github.com/guyboertje/jrjackson/blob/v0.5.3/README.md
Release notes
Update jackson to 2.21.6
What does this PR do?
Get the latests 2.21 LTS for jackson in logstash core.
Relates: #19440