From f3d3f03e423cfc3e3eb0c20bf78bfba020e88852 Mon Sep 17 00:00:00 2001 From: Ian Streeter Date: Wed, 4 May 2022 22:52:33 +0100 Subject: [PATCH] Bump jackson-databind to 2.12.6.1 (close #260) --- build.sbt | 2 +- project/Dependencies.scala | 5 +++-- 2 files changed, 4 insertions(+), 3 deletions(-) diff --git a/build.sbt b/build.sbt index b4bac7f..d9dbbcf 100644 --- a/build.sbt +++ b/build.sbt @@ -29,7 +29,6 @@ lazy val main = project.in(file("modules/main")) Dependencies.Libraries.slf4j, Dependencies.Libraries.jclOverSlf4j, Dependencies.Libraries.jackson, - Dependencies.Libraries.jacksonCbor, Dependencies.Libraries.sentry, // Scala Dependencies.Libraries.decline, @@ -61,6 +60,7 @@ lazy val lzo = project.in(file("modules/lzo")) Dependencies.Libraries.hadoopLZO, Dependencies.Libraries.thrift, Dependencies.Libraries.collections, + Dependencies.Libraries.jacksonCbor, ) ) .dependsOn(main % "compile->compile; test->test") diff --git a/project/Dependencies.scala b/project/Dependencies.scala index d20cea0..c0dab87 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -28,7 +28,8 @@ object Dependencies { val hadoop = "2.10.1" val elephantbird = "4.17" val hadoopLZO = "0.4.20" - val jackson = "2.12.6" + val jackson = "2.12.6.1" + val jacksonCbor = "2.12.6" val sentry = "1.7.30" val collections = "3.2.2" // Address vulnerability // Thrift (test only) @@ -51,7 +52,7 @@ object Dependencies { val jclOverSlf4j = "org.slf4j" % "jcl-over-slf4j" % V.slf4j val kinesisClient = "com.amazonaws" % "amazon-kinesis-client" % V.kinesisClient val kinesisConnector = "com.amazonaws" % "amazon-kinesis-connectors" % V.kinesisConnector - val jacksonCbor = "com.fasterxml.jackson.dataformat" % "jackson-dataformat-cbor" % V.jackson + val jacksonCbor = "com.fasterxml.jackson.dataformat" % "jackson-dataformat-cbor" % V.jacksonCbor val jackson = "com.fasterxml.jackson.core" % "jackson-databind" % V.jackson val thrift = "org.apache.thrift" % "libthrift" % V.thrift val hadoop = ("org.apache.hadoop" % "hadoop-common" % V.hadoop)