Skip to content

chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.21.1#23

Open
renovate[bot] wants to merge 1 commit intomainfrom
renovate/com.fasterxml.jackson.core-jackson-databind-2.x
Open

chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.21.1#23
renovate[bot] wants to merge 1 commit intomainfrom
renovate/com.fasterxml.jackson.core-jackson-databind-2.x

Conversation

@renovate
Copy link
Contributor

@renovate renovate bot commented Jun 21, 2025

This PR contains the following updates:

Package Change Age Adoption Passing Confidence
com.fasterxml.jackson.core:jackson-databind (source) 2.18.22.21.1 age adoption passing confidence
com.fasterxml.jackson.core:jackson-databind (source) 2.13.42.21.1 age adoption passing confidence

Configuration

📅 Schedule: Branch creation - At any time (no schedule defined), Automerge - At any time (no schedule defined).

🚦 Automerge: Disabled by config. Please merge this manually once you are satisfied.

Rebasing: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.

🔕 Ignore: Close this PR and you won't be reminded about these updates again.


  • If you want to rebase/retry this PR, check this box

This PR was generated by Mend Renovate. View the repository job log.


This change is Reviewable

@vercel
Copy link

vercel bot commented Jun 21, 2025

The latest updates on your projects. Learn more about Vercel for GitHub.

Project Deployment Actions Updated (UTC)
boomchainlab-framework Error Error Feb 23, 2026 1:59am

@renovate renovate bot force-pushed the renovate/com.fasterxml.jackson.core-jackson-databind-2.x branch from 82b4793 to 64c3591 Compare July 18, 2025 19:02
@renovate renovate bot changed the title chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.19.1 chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.19.2 Jul 18, 2025
@coderabbitai
Copy link

coderabbitai bot commented Jul 18, 2025

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.


Comment @coderabbitai help to get the list of available commands and usage tips.

@renovate renovate bot force-pushed the renovate/com.fasterxml.jackson.core-jackson-databind-2.x branch from 64c3591 to 178c5ca Compare August 31, 2025 10:04
@renovate renovate bot changed the title chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.19.2 chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.20.0 Aug 31, 2025
@renovate renovate bot force-pushed the renovate/com.fasterxml.jackson.core-jackson-databind-2.x branch from 178c5ca to 3971b03 Compare October 31, 2025 03:27
@renovate renovate bot changed the title chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.20.0 chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.20.1 Oct 31, 2025
@renovate renovate bot force-pushed the renovate/com.fasterxml.jackson.core-jackson-databind-2.x branch from 3971b03 to 2c749fc Compare January 19, 2026 02:02
@renovate renovate bot changed the title chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.20.1 chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.21.0 Jan 19, 2026
// We publish with a higher version (see below) to ensure users depend on a secure version by default.
force("com.fasterxml.jackson.core:jackson-core:2.13.4")
force("com.fasterxml.jackson.core:jackson-databind:2.13.4")
force("com.fasterxml.jackson.core:jackson-databind:2.21.0")

This comment was marked as outdated.

@renovate renovate bot force-pushed the renovate/com.fasterxml.jackson.core-jackson-databind-2.x branch from 2c749fc to 9a147dd Compare February 23, 2026 01:59
@renovate renovate bot changed the title chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.21.0 chore(deps): update dependency com.fasterxml.jackson.core:jackson-databind to v2.21.1 Feb 23, 2026
Comment on lines 10 to 12
force("com.fasterxml.jackson.core:jackson-core:2.13.4")
force("com.fasterxml.jackson.core:jackson-databind:2.13.4")
force("com.fasterxml.jackson.core:jackson-databind:2.21.1")
force("com.fasterxml.jackson.core:jackson-annotations:2.13.4")
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Bug: The build configuration forces a minor version mismatch between jackson-databind (2.21.1) and other Jackson core libraries (2.13.4), violating compatibility requirements and risking runtime serialization errors.
Severity: MEDIUM

Suggested Fix

Align all Jackson library versions in the build.gradle.kts file. Ensure that jackson-databind, jackson-core, jackson-annotations, and other related Jackson modules all use the same version, for example, by upgrading all of them to the latest compatible version like 2.21.1 or 2.18.2 consistently across all configurations.

Prompt for AI Agent
Review the code at the location below. A potential bug has been identified by an AI
agent.
Verify if this is a real issue. If it is, propose a fix; if not, explain why it's not
valid.

Location: agu-token-java-core/build.gradle.kts#L10-L12

Potential issue: The `build.gradle.kts` file configures mismatched minor versions for
Jackson libraries. During compilation, `jackson-databind` is set to version `2.21.1`
while `jackson-core` and `jackson-annotations` are at `2.13.4`. This violates Jackson's
strict requirement that all core components share the same minor version. This
incompatibility can lead to unpredictable runtime errors, such as `NoSuchMethodError`,
during JSON serialization or deserialization, as different modules expect different
method signatures. The existing custom version check,
`checkJacksonVersionCompatibility()`, is insufficient as it only validates major
versions and a minimum minor version, failing to enforce the required minor version
alignment across all Jackson modules.

Did we get this right? 👍 / 👎 to inform future reviews.

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants