diff --git a/CHANGELOG.md b/CHANGELOG.md
index 99e96f7..cffcae6 100644
--- a/CHANGELOG.md
+++ b/CHANGELOG.md
@@ -2,6 +2,16 @@
 
 All notable changes to QingStor SDK for JAVA will be documented in this file.
 
+## [v2.6.8] - 2026-07-14
+
+### Changed
+
+- Align shaded jar release policy and configure maven-shade-plugin settings.
+
+### Fixed
+
+- Update jackson to 2.18.8 to address CVE-2026-54512.
+
 ## [v2.6.7] - 2026-05-08
 
 ### Added
diff --git a/docs/install.md b/docs/install.md
index 77f4050..7f2b046 100644
--- a/docs/install.md
+++ b/docs/install.md
@@ -22,7 +22,7 @@ Maven:
 <dependency>
   <groupId>com.yunify</groupId>
   <artifactId>qingstor.sdk.java</artifactId>
-  <version>2.6.7</version>
+  <version>2.6.8</version>
 </dependency>
 ```
 
diff --git a/docs/install_zh-CN.md b/docs/install_zh-CN.md
index c778aff..8176ae0 100644
--- a/docs/install_zh-CN.md
+++ b/docs/install_zh-CN.md
@@ -22,7 +22,7 @@ Maven:
 <dependency>
   <groupId>com.yunify</groupId>
   <artifactId>qingstor.sdk.java</artifactId>
-  <version>2.6.7</version>
+  <version>2.6.8</version>
 </dependency>
 ```
 
diff --git a/pom.xml b/pom.xml
index db13f44..f39a0d4 100644
--- a/pom.xml
+++ b/pom.xml
@@ -5,7 +5,7 @@
 
     <groupId>com.yunify</groupId>
     <artifactId>qingstor.sdk.java</artifactId>
-    <version>2.6.7</version>
+    <version>2.6.8</version>
     <name>Qingcloud Qingstor SDK for Java</name>
     <description>The official QingStor SDK for the Java programming language.</description>
     <url>https://www.qingcloud.com/products/objectstorage/</url>
@@ -53,12 +53,12 @@
         <dependency>
             <groupId>com.fasterxml.jackson.core</groupId>
             <artifactId>jackson-databind</artifactId>
-            <version>2.15.3</version>
+            <version>2.18.8</version>
         </dependency>
         <dependency>
             <groupId>com.fasterxml.jackson.dataformat</groupId>
             <artifactId>jackson-dataformat-yaml</artifactId>
-            <version>2.15.3</version>
+            <version>2.18.8</version>
         </dependency>
         <dependency>
             <groupId>org.slf4j</groupId>
@@ -321,18 +321,19 @@
                         </executions>
                         <configuration>
                             <shadedArtifactAttached>false</shadedArtifactAttached>
+                            <finalName>${project.artifactId}-${project.version}-shaded</finalName>
+                            <!-- Temporary classifier avoids finalName self-renaming; it is not attached. -->
+                            <shadedClassifierName>shade-work</shadedClassifierName>
                             <artifactSet>
                                 <excludes>
                                     <exclude>org.slf4j:slf4j-api</exclude>
-                                    <exclude>junit:junit</exclude>
                                 </excludes>
                             </artifactSet>
                             <createDependencyReducedPom>true</createDependencyReducedPom>
                             <dependencyReducedPomLocation>
-                                ${project.build.directory}/dependency-reduced-pom.xml</dependencyReducedPomLocation>
-
-                            <createSourcesJar>true</createSourcesJar>
-                            <shadeSourcesContent>true</shadeSourcesContent>
+                                ${project.build.directory}/dependency-reduced-pom.xml
+                            </dependencyReducedPomLocation>
+                            <useDependencyReducedPomInJar>true</useDependencyReducedPomInJar>
                             <relocations>
                                 <relocation>
                                     <pattern>okhttp3</pattern>
@@ -373,15 +374,6 @@
                                         <Implementation-Version>${project.version}</Implementation-Version>
                                     </manifestEntries>
                                 </transformer>
-                                <transformer
-                                    implementation="org.apache.maven.plugins.shade.resource.DontIncludeResourceTransformer">
-                                    <resources>
-                                        <resource>META-INF/MANIFEST.MF</resource>
-                                        <resource>META-INF/LICENSE</resource>
-                                        <resource>META-INF/NOTICE</resource>
-                                        <resource>META-INF/maven</resource>
-                                    </resources>
-                                </transformer>
                             </transformers>
                             <filters>
                                 <filter>
diff --git a/src/main/resources/version.properties b/src/main/resources/version.properties
index 56dff11..9926eec 100644
--- a/src/main/resources/version.properties
+++ b/src/main/resources/version.properties
@@ -1 +1 @@
-version=2.6.7
+version=2.6.8