From ef49829e83f1d294f9ce3a5ecbd2ab8c24d584d3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Wed, 24 Jun 2026 08:14:38 +0000 Subject: [PATCH] Bump com.fasterxml.jackson.core:jackson-databind Bumps the gradle group with 1 update in the / directory: [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson). Updates `com.fasterxml.jackson.core:jackson-databind` from 2.21.4 to 2.22.0 - [Commits](https://github.com/FasterXML/jackson/commits) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.22.0 dependency-type: direct:production dependency-group: gradle ... Signed-off-by: dependabot[bot] --- build.gradle.kts | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/build.gradle.kts b/build.gradle.kts index 1273bbc..cf26ff7 100644 --- a/build.gradle.kts +++ b/build.gradle.kts @@ -55,7 +55,7 @@ dependencies { // Patch transitive jackson-databind 2.21.3 (via client-java) for // CVE-2026-54512/-54513 (PolymorphicTypeValidator bypasses, fixed in 2.21.4). - implementation("com.fasterxml.jackson.core:jackson-databind:2.21.4") + implementation("com.fasterxml.jackson.core:jackson-databind:2.22.0") } implementation("io.poddeck:common:1.0.0-SNAPSHOT")