From 7f34160bae26d9652fa45cf750e241670f81c1c8 Mon Sep 17 00:00:00 2001 From: Jorge Azevedo Date: Wed, 8 Apr 2026 11:13:20 +0100 Subject: [PATCH 1/2] Bump Jackson from 2.19.2 to 2.21.2 to fix GHSA-72hv-8253-57qq --- build.sbt | 10 ++++++---- 1 file changed, 6 insertions(+), 4 deletions(-) diff --git a/build.sbt b/build.sbt index 8dcf20c..b7d1ebf 100644 --- a/build.sbt +++ b/build.sbt @@ -20,15 +20,17 @@ Test / testOptions += val playGitHubVersion = "9.0.1" -val jacksonVersion = "2.19.2" -val jacksonDatabindVersion = "2.19.2" +val jacksonVersion = "2.21.2" +val jacksonDatabindVersion = "2.21.2" +val jacksonAnnotationsVersion = "2.21" val jacksonOverrides = Seq( "com.fasterxml.jackson.core" % "jackson-core", - "com.fasterxml.jackson.core" % "jackson-annotations", "com.fasterxml.jackson.datatype" % "jackson-datatype-jdk8", "com.fasterxml.jackson.datatype" % "jackson-datatype-jsr310" -).map(_ % jacksonVersion) +).map(_ % jacksonVersion) ++ Seq( + "com.fasterxml.jackson.core" % "jackson-annotations" % jacksonAnnotationsVersion +) val jacksonDatabindOverrides = Seq( "com.fasterxml.jackson.core" % "jackson-databind" % jacksonDatabindVersion From 896575ff9260795275338f79384f0333140756c9 Mon Sep 17 00:00:00 2001 From: Jorge Azevedo Date: Thu, 9 Apr 2026 11:29:33 +0100 Subject: [PATCH 2/2] Simplify: drop jackson-annotations override, let it resolve transitively --- build.sbt | 9 +++------ 1 file changed, 3 insertions(+), 6 deletions(-) diff --git a/build.sbt b/build.sbt index b7d1ebf..9430627 100644 --- a/build.sbt +++ b/build.sbt @@ -20,17 +20,14 @@ Test / testOptions += val playGitHubVersion = "9.0.1" -val jacksonVersion = "2.21.2" -val jacksonDatabindVersion = "2.21.2" -val jacksonAnnotationsVersion = "2.21" +val jacksonVersion = "2.21.2" +val jacksonDatabindVersion = "2.21.2" val jacksonOverrides = Seq( "com.fasterxml.jackson.core" % "jackson-core", "com.fasterxml.jackson.datatype" % "jackson-datatype-jdk8", "com.fasterxml.jackson.datatype" % "jackson-datatype-jsr310" -).map(_ % jacksonVersion) ++ Seq( - "com.fasterxml.jackson.core" % "jackson-annotations" % jacksonAnnotationsVersion -) +).map(_ % jacksonVersion) val jacksonDatabindOverrides = Seq( "com.fasterxml.jackson.core" % "jackson-databind" % jacksonDatabindVersion