Skip to content

Vulnerabilities in logback and jackson#12693

Closed
kopernic-pl wants to merge 2 commits into3.0.0from
chore/vulnerability
Closed

Vulnerabilities in logback and jackson#12693
kopernic-pl wants to merge 2 commits into3.0.0from
chore/vulnerability

Conversation

@kopernic-pl
Copy link

PR checklist

  • Read the contribution guidelines.
  • Ran the shell script under ./bin/ to update Petstore sample so that CIs can verify the change. (For instance, only need to run ./bin/{LANG}-petstore.sh and ./bin/security/{LANG}-petstore.sh if updating the {LANG} (e.g. php, ruby, python, etc) code generator or {LANG} client's mustache templates). Windows batch files can be found in .\bin\windows\.
  • Filed the PR against the correct branch: 3.0.0 branch for changes related to OpenAPI spec 3.0. Default: master.

Description of the PR

(details of the change, additional tests that have been done, reference to the issue for tracking, etc)

@kopernic-pl kopernic-pl added the dependencies Pull requests that update a dependency file label Mar 14, 2026
Copy link

Copilot AI left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Pull request overview

Updates dependency versions in the root Maven build to address reported vulnerabilities in core libraries.

Changes:

  • Bump jackson-version from 2.19.2 to 2.21.1.
  • Bump logback-version from 1.5.19 to 1.5.25.

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

<swagger-parser-version>2.1.35</swagger-parser-version>
<swagger-parser-version-v1>1.0.75</swagger-parser-version-v1>
<jackson-version>2.19.2</jackson-version>
<jackson-version>2.21.1</jackson-version>
<commons-lang-version>3.18.0</commons-lang-version>
<slf4j-version>2.0.9</slf4j-version>
<logback-version>1.5.19</logback-version>
<logback-version>1.5.25</logback-version>
@kopernic-pl
Copy link
Author

2.21.1 does not exist in central (yet). Closing.

@kopernic-pl kopernic-pl deleted the chore/vulnerability branch March 14, 2026 12:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants