Skip to content

[fix][sec] Upgrade Jackson version to 2.18.6#25264

Open
oneby-wang wants to merge 4 commits intoapache:masterfrom
oneby-wang:jackson_version_upgrade
Open

[fix][sec] Upgrade Jackson version to 2.18.6#25264
oneby-wang wants to merge 4 commits intoapache:masterfrom
oneby-wang:jackson_version_upgrade

Conversation

@oneby-wang
Copy link
Contributor

@oneby-wang oneby-wang commented Feb 26, 2026

Fixes #25260

Motivation

Jackson 2.17.x used in Pulsar is no longer maintained. Upgrade Jackson version to a LTS version.

Modifications

Upgrade Jackson version to 2.18.6 and exclude javax.xml.bind-jaxb-api dependency.

Verifying this change

  • Make sure that the change passes the CI checks.

Does this pull request potentially affect one of the following parts:

If the box was checked, please highlight the changes

  • Dependencies (add or upgrade a dependency)
  • The public API
  • The schema
  • The default values of configurations
  • The threading model
  • The binary protocol
  • The REST endpoints
  • The admin CLI options
  • The metrics
  • Anything that affects deployment

Documentation

  • doc
  • doc-required
  • doc-not-needed
  • doc-complete

Matching PR in forked repository

PR in forked repository: oneby-wang#28

@github-actions github-actions bot added doc-required Your PR changes impact docs and you will update later. doc-not-needed Your PR changes do not impact docs and removed doc-required Your PR changes impact docs and you will update later. labels Feb 26, 2026
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

doc-not-needed Your PR changes do not impact docs

Projects

None yet

Development

Successfully merging this pull request may close these issues.

Upgrade Jackson to a supported version

1 participant