Skip to content

Commit

Permalink
chore(deps): update jackson monorepo to v2.18.0
Browse files Browse the repository at this point in the history
  • Loading branch information
cultureamp-renovate[bot] committed Oct 5, 2024
1 parent 4da5dc4 commit d95a639
Showing 1 changed file with 2 additions and 2 deletions.
4 changes: 2 additions & 2 deletions build.gradle.kts
Original file line number Diff line number Diff line change
Expand Up @@ -51,7 +51,7 @@ dependencies {
// Previous 2.15.2 version was flagged as vulnerability:
// CVE-2023-35116 - developers claim it's a bogus alert https://github.com/FasterXML/jackson-databind/issues/3972
// but I guess won't hurt to upgrade it + will resolve dependency check failure
implementation("com.fasterxml.jackson.core:jackson-databind:2.16.0")
implementation("com.fasterxml.jackson.core:jackson-databind:2.18.0")

// Upgraded version of Snappy Java to patch:
// CVE-2023-34454 - https://github.com/advisories/GHSA-fjpj-2g6w-x25r
Expand All @@ -62,7 +62,7 @@ dependencies {
// CVE-2023-42503
implementation("org.apache.commons:commons-compress:1.26.0")

implementation("com.fasterxml.jackson.module:jackson-module-kotlin:2.13.3")
implementation("com.fasterxml.jackson.module:jackson-module-kotlin:2.18.0")
implementation("org.mongodb.kafka:mongo-kafka-connect:1.7.0")
implementation("org.mongodb:bson:4.5.1")
}
Expand Down

0 comments on commit d95a639

Please sign in to comment.