Skip to content

build(deps): bump com.fasterxml.jackson.core:jackson-core from 2.19.2 to 2.21.1 in /samples/client/echo_api/java/apache-httpclient#23084

Open
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/samples/client/echo_api/java/apache-httpclient/com.fasterxml.jackson.core-jackson-core-2.21.1
Open

build(deps): bump com.fasterxml.jackson.core:jackson-core from 2.19.2 to 2.21.1 in /samples/client/echo_api/java/apache-httpclient#23084
dependabot[bot] wants to merge 1 commit intomasterfrom
dependabot/maven/samples/client/echo_api/java/apache-httpclient/com.fasterxml.jackson.core-jackson-core-2.21.1

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Mar 1, 2026

Bumps com.fasterxml.jackson.core:jackson-core from 2.19.2 to 2.21.1.

Commits
  • f319790 [maven-release-plugin] prepare release jackson-core-2.21.1
  • 1b741b1 Prep for 2.21.1 release
  • 79f789e Merge branch '2.20' into 2.21
  • 025b692 Merge branch '2.19' into 2.20
  • 71ebce7 Merge branch '2.18' into 2.19
  • edb8f4d Post-release dep version bump
  • 0a214d1 [maven-release-plugin] prepare for next development iteration
  • 9a46ef8 [maven-release-plugin] prepare release jackson-core-2.18.6
  • 5f192db Prep for 2.18.6 release
  • 00342f2 update release notes wrt #1555
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)
    You can disable automated security fix PRs for this repo from the Security Alerts page.

Summary by cubic

Upgrade jackson-core from 2.19.2 to 2.21.1 in the echo_api Java Apache HttpClient sample to pull in recent fixes and improvements. Only the jackson-version property in pom.xml was updated; no code changes.

Written for commit f1b6701. Summary will update on new commits.

Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.19.2 to 2.21.1.
- [Commits](FasterXML/jackson-core@jackson-core-2.19.2...jackson-core-2.21.1)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.21.1
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Mar 1, 2026
Copy link
Contributor

@cubic-dev-ai cubic-dev-ai bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 issue found across 1 file

Prompt for AI agents (unresolved issues)

Check if these issues are valid — if so, understand the root cause of each and fix them. If appropriate, use sub-agents to investigate and fix each issue separately.


<file name="samples/client/echo_api/java/apache-httpclient/pom.xml">

<violation number="1" location="samples/client/echo_api/java/apache-httpclient/pom.xml:273">
P2: Jackson core/annotations were bumped to 2.21.x while jackson-databind stays at 2.19.x. Jackson docs state core components must share the same minor version, so this mismatch can cause incompatibilities. Align jackson-databind-version with jackson-version.</violation>
</file>

Reply with feedback, questions, or to request a fix. Tag @cubic-dev-ai to re-run a review.

<project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
<httpclient-version>5.2.1</httpclient-version>
<jackson-version>2.19.2</jackson-version>
<jackson-version>2.21.1</jackson-version>
Copy link
Contributor

@cubic-dev-ai cubic-dev-ai bot Mar 1, 2026

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

P2: Jackson core/annotations were bumped to 2.21.x while jackson-databind stays at 2.19.x. Jackson docs state core components must share the same minor version, so this mismatch can cause incompatibilities. Align jackson-databind-version with jackson-version.

Prompt for AI agents
Check if this issue is valid — if so, understand the root cause and fix it. At samples/client/echo_api/java/apache-httpclient/pom.xml, line 273:

<comment>Jackson core/annotations were bumped to 2.21.x while jackson-databind stays at 2.19.x. Jackson docs state core components must share the same minor version, so this mismatch can cause incompatibilities. Align jackson-databind-version with jackson-version.</comment>

<file context>
@@ -270,7 +270,7 @@
         <project.build.sourceEncoding>UTF-8</project.build.sourceEncoding>
         <httpclient-version>5.2.1</httpclient-version>
-        <jackson-version>2.19.2</jackson-version>
+        <jackson-version>2.21.1</jackson-version>
         <jackson-databind-version>2.19.2</jackson-databind-version>
         <jackson-databind-nullable-version>0.2.9</jackson-databind-nullable-version>
</file context>
Fix with Cubic

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants