Skip to content

Update panda to v18#605

Merged
emdash-ie merged 1 commit intomainfrom
resolve-jackson-core-vulnerability
Mar 26, 2026
Merged

Update panda to v18#605
emdash-ie merged 1 commit intomainfrom
resolve-jackson-core-vulnerability

Conversation

@emdash-ie
Copy link
Copy Markdown
Contributor

@emdash-ie emdash-ie commented Mar 26, 2026

What does this change?

This should incorporate a transitive update of jackson-core above 2.21.0, thereby resolving the vulnerability identified by dependabot.

Will close https://github.com/guardian/workflow/issues/1434

How has this change been tested?

Tested by deploying to CODE, then logging out of and back into composer-CODE, then running typerighter on this article. Typerighter ran successfully, presumably using a new pan-domain-auth token after I logged out and back in.

This should incorporate a transitive update of jackson-core above
2.21.0, thereby resolving the vulnerability identified by dependabot.
@emdash-ie emdash-ie added the maintenance Departmental tracking: maintenance work, not a fix or a feature label Mar 26, 2026
@emdash-ie emdash-ie marked this pull request as ready for review March 26, 2026 16:30
@emdash-ie emdash-ie requested a review from a team as a code owner March 26, 2026 16:30
Copy link
Copy Markdown
Contributor

@waisingyiu waisingyiu left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

👍

@emdash-ie emdash-ie merged commit 03b8170 into main Mar 26, 2026
9 of 10 checks passed
@emdash-ie emdash-ie deleted the resolve-jackson-core-vulnerability branch March 26, 2026 16:36
@gu-prout
Copy link
Copy Markdown

gu-prout bot commented Mar 26, 2026

Seen on Checker, Rule Manager (merged by @emdash-ie 8 minutes and 36 seconds ago) Please check your changes!

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

maintenance Departmental tracking: maintenance work, not a fix or a feature Seen-on-Checker Seen-on-Rule Manager

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants