From 0573b4bc8dd2be7a17e473ac98ad6514d528e861 Mon Sep 17 00:00:00 2001
From: Luis Paolini <paoliniluis@gmail.com>
Date: Tue, 8 Nov 2022 14:01:14 -0400
Subject: [PATCH] Upgrading jackson-databind to latest version (#26249)
Co-authored-by: Noah Moss <32746338+noahmoss@users.noreply.github.com>
---
deps.edn | 2 +-
1 file changed, 1 insertion(+), 1 deletion(-)
diff --git a/deps.edn b/deps.edn
index b42f8342c0b..21d34d6369a 100644
--- a/deps.edn
+++ b/deps.edn
@@ -32,7 +32,7 @@
com.draines/postal {:mvn/version "2.0.5"} ; SMTP library
com.google.guava/guava {:mvn/version "31.0.1-jre"} ; dep for BigQuery, Spark, and GA. Require here rather than letting different dep versions stomp on each other — see comments on #9697
com.fasterxml.jackson.core/jackson-databind
- {:mvn/version "2.13.2.2"} ; JSON processor used by snowplow-java-tracker (pinned version due to CVE-2020-36518)
+ {:mvn/version "2.13.4.2"} ; JSON processor used by snowplow-java-tracker
com.fasterxml.woodstox/woodstox-core {:mvn/version "6.4.0"} ; trans dep of commons-codec (pinned version due to CVE-2022-40151)
com.h2database/h2 {:mvn/version "1.4.197"} ; embedded SQL database
com.snowplowanalytics/snowplow-java-tracker
--
GitLab