Skip to content

[4.4.x] bump jackson.version from 2.21.5 to 2.22.2 - #2809

Open
dependabot[bot] wants to merge 2 commits into
karaf-4.4.xfrom
dependabot/maven/karaf-4.4.x/jackson.version-2.22.2
Open

[4.4.x] bump jackson.version from 2.21.5 to 2.22.2#2809
dependabot[bot] wants to merge 2 commits into
karaf-4.4.xfrom
dependabot/maven/karaf-4.4.x/jackson.version-2.22.2

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Aug 19, 2026

Copy link
Copy Markdown
Contributor

Bumps jackson.version from 2.21.5 to 2.22.2.
Updates com.fasterxml.jackson.core:jackson-databind from 2.21.5 to 2.22.2

Commits

Updates com.fasterxml.jackson.dataformat:jackson-dataformat-xml from 2.21.5 to 2.22.2

Commits
  • 8a842c5 [maven-release-plugin] prepare release jackson-dataformat-xml-2.22.2
  • bcae195 Prep for 2.22.2 release
  • fecfc16 Fix build wrt JDK8 bytecode
  • 47e14c5 Merge branch '2.21' into 2.22
  • b45fe4f Fix build wrt JDK8 bytecode
  • c774890 Merge branch '2.20' into 2.21
  • 5ce7da9 Fix build wrt JDK8 bytecode
  • 43a6b08 Merge branch '2.19' into 2.20
  • 00d2ca6 Fix build wrt JDK8 bytecode
  • d9aa853 Merge branch '2.18' into 2.19
  • Additional commits viewable in compare view

Updates com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider from 2.21.5 to 2.22.2

@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Aug 19, 2026
Comment thread pom.xml Outdated
@holgerfriedrich

Copy link
Copy Markdown
Contributor

Ok, stax2 4.3 is missing, will care for that

@rovarga

rovarga commented Aug 21, 2026

Copy link
Copy Markdown
Contributor

Hmm... so 2.21.x is an LTS branch, while 2.22.x is not. I would prefer if we stuck with LTS on 4.4.x.

@rovarga

rovarga commented Aug 21, 2026

Copy link
Copy Markdown
Contributor

Ok, stax2 4.3 is missing, will care for that

Yeah, but I would also suggest taking a look at woodstox -- stax2/woodstox/jackson form a stack.

@holgerfriedrich

Copy link
Copy Markdown
Contributor

Hmm... so 2.21.x is an LTS branch, while 2.22.x is not. I would prefer if we stuck with LTS on 4.4.x.

I argued to stay on 2.21.x LTS a while ago
#2692 (comment)

But today I am no longer sure if this is a good idea. Other libraries tend do upgrade their jackson dependencies to 2.22.x, so maybe we should follow. IIRC I had an issue with swagger-core, requiring 2.22.1.

@holgerfriedrich

Copy link
Copy Markdown
Contributor

@dependabot recreate

Bumps `jackson.version` from 2.21.5 to 2.22.2.

Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.5 to 2.22.2
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `com.fasterxml.jackson.dataformat:jackson-dataformat-xml` from 2.21.5 to 2.22.2
- [Commits](FasterXML/jackson-dataformat-xml@jackson-dataformat-xml-2.21.5...jackson-dataformat-xml-2.22.2)

Updates `com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider` from 2.21.5 to 2.22.2

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.22.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-xml
  dependency-version: 2.22.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
- dependency-name: com.fasterxml.jackson.jaxrs:jackson-jaxrs-json-provider
  dependency-version: 2.22.2
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot
dependabot Bot force-pushed the dependabot/maven/karaf-4.4.x/jackson.version-2.22.2 branch from a760051 to 108fb22 Compare August 21, 2026 22:03
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants