-
Type:
Task
-
Status: Resolved
-
Priority:
Minor
-
Resolution: Fixed
-
Affects Version/s: None
-
Component/s: Code Refactoring (Global)
-
Release Notes Summary:Jackson BOM is now imported in the Maven dependency graph.
-
Release Notes Description:
-
Tags:
-
Team:PLATFORM
-
Sprint:nxplatform #75
-
Story Points:1
We would like to use jackson-bom dependencies for our jackson dependencies in order to have all possible jackson artefacts declared in the Maven dependency graph.
Furthermore, the BOM is released with a date based version when a micro-patch is released, like jackson-databind 2.12.7.1 which fixes some CVE, see https://github.com/FasterXML/jackson-bom/blob/jackson-bom-2.12.7.20221012/pom.xml. This will help security upgrades with help of dependabot.
- is related to
-
NXP-32064 Upgrade jackson-core to 2.15.0
-
- Resolved
-