Update Jackson to 2.21.3 / 3.1.3

[reta]

Description

Update Jackson to 2.21.3 / 3.1.3

Related Issues

N/A

Check List

• Functionality includes testing.
• API changes companion pull request created, if applicable.
• Public documentation issue/PR created, if applicable.

By submitting this pull request, I confirm that my contribution is made under the terms of the Apache 2.0 license.
For more information on following Developer Certificate of Origin and signing off your commits, please check here.

[github-actions]

PR Code Analyzer ❗

AI-powered 'Code-Diff-Analyzer' found issues on commit 735a1a2.

Path	Line	Severity	Description
gradle/libs.versions.toml	12	high	Dependency version bump for multiple Jackson libraries (jackson 2.21.2→2.21.3, jackson_databind 2.21.2→2.21.3, jackson3 3.1.2→3.1.3, jackson3_databind 3.1.2→3.1.3). Per mandatory supply chain rules, all dependency version changes must be flagged regardless of apparent legitimacy. Maintainers should verify the new SHA1 hashes against official Jackson release artifacts on Maven Central before merging.

The table above displays the top 10 most important findings.

Total: 1 | Critical: 0 | High: 1 | Medium: 0 | Low: 0

---

Pull Requests Author(s): Please update your Pull Request according to the report above.

Repository Maintainer(s): You can bypass diff analyzer by adding label skip-diff-analyzer after reviewing the changes carefully, then re-run failed actions. To re-enable the analyzer, remove the label, then re-run all actions.

---

⚠️ Note: The Code-Diff-Analyzer helps protect against potentially harmful code patterns. Please ensure you have thoroughly reviewed the changes beforehand.

Thanks.

[github-actions]

PR Reviewer Guide 🔍

(Review updated until commit e5511be)

Here are some key observations to aid the review process:

🧪 No relevant tests

🔒 No security concerns identified

✅ No TODO sections

🔀 Multiple PR themes Sub-PR theme: Update Jackson 2.x to 2.21.3 Relevant files: gradle/libs.versions.toml server/licenses/jackson-core-2.21.3.jar.sha1 server/licenses/jackson-dataformat-cbor-2.21.3.jar.sha1 server/licenses/jackson-dataformat-smile-2.21.3.jar.sha1 server/licenses/jackson-dataformat-yaml-2.21.3.jar.sha1 modules/ingest-geoip/licenses/jackson-databind-2.21.3.jar.sha1 modules/ingest-geoip/licenses/jackson-datatype-jsr310-2.21.3.jar.sha1 plugins/arrow-flight-rpc/licenses/jackson-databind-2.21.3.jar.sha1 plugins/crypto-kms/licenses/jackson-databind-2.21.3.jar.sha1 plugins/discovery-ec2/licenses/jackson-databind-2.21.3.jar.sha1 plugins/ingestion-kinesis/licenses/jackson-databind-2.21.3.jar.sha1 plugins/repository-azure/licenses/jackson-databind-2.21.3.jar.sha1 plugins/repository-azure/licenses/jackson-dataformat-xml-2.21.3.jar.sha1 plugins/repository-azure/licenses/jackson-datatype-jsr310-2.21.3.jar.sha1 plugins/repository-azure/licenses/jackson-module-jaxb-annotations-2.21.3.jar.sha1 plugins/repository-s3/licenses/jackson-databind-2.21.3.jar.sha1 sandbox/libs/analytics-framework/licenses/jackson-databind-2.21.3.jar.sha1 sandbox/plugins/analytics-backend-datafusion/licenses/jackson-datatype-jdk8-2.21.3.jar.sha1 sandbox/plugins/analytics-engine/licenses/jackson-databind-2.21.3.jar.sha1 sandbox/plugins/parquet-data-format/licenses/jackson-databind-2.21.3.jar.sha1 Sub-PR theme: Update Jackson 3.x to 3.1.3 Relevant files: gradle/libs.versions.toml client/sniffer/licenses/jackson-core-3.1.3.jar.sha1 libs/core/licenses/jackson-core-3.1.3.jar.sha1 libs/x-content/licenses/jackson-core-3.1.3.jar.sha1 libs/x-content/licenses/jackson-dataformat-cbor-3.1.3.jar.sha1 libs/x-content/licenses/jackson-dataformat-smile-3.1.3.jar.sha1 libs/x-content/licenses/jackson-dataformat-yaml-3.1.3.jar.sha1 server/licenses/jackson-core-3.1.3.jar.sha1 server/licenses/jackson-dataformat-cbor-3.1.3.jar.sha1 server/licenses/jackson-dataformat-smile-3.1.3.jar.sha1 server/licenses/jackson-dataformat-yaml-3.1.3.jar.sha1

⚡ Recommended focus areas for review SHA1 Verification The SHA1 hashes for the new Jackson artifacts should be verified against the official Maven Central repository to ensure the artifacts have not been tampered with. Multiple modules share the same SHA1 hash for jackson-databind (aa7ccec161c275f3e6332666ab758916f3120714), which is expected, but all hashes should be cross-checked. jackson = "2.21.3" jackson_databind = "2.21.3" jackson3 = "3.1.3" jackson3_databind = "3.1.3"

[github-actions]

Persistent review updated to latest commit 062b161

[github-actions]

❌ Gradle check result for 062b161: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

❌ Gradle check result for 062b161: FAILURE

Please examine the workflow log, locate, and copy-paste the failure(s) below, then iterate to green. Is the failure a flaky test unrelated to your change?

[github-actions]

Persistent review updated to latest commit e5511be

[reta]

Breaking changes failure is caused by #21143

[github-actions]

✅ Gradle check result for e5511be: SUCCESS

[codecov]

Codecov Report

✅ All modified and coverable lines are covered by tests.
✅ Project coverage is 73.47%. Comparing base (fbfcabe) to head (e5511be).
⚠️ Report is 3 commits behind head on main.

Additional details and impacted files

@@             Coverage Diff              @@
##               main   #21493      +/-   ##
============================================
- Coverage     73.55%   73.47%   -0.08%     
+ Complexity    74490    74435      -55     
============================================
  Files          5970     5970              
  Lines        338262   338260       -2     
  Branches      48758    48752       -6     
============================================
- Hits         248824   248553     -271     
- Misses        69581    69919     +338     
+ Partials      19857    19788      -69     

☔ View full report in Codecov by Sentry.
📢 Have feedback on the report? Share it here.

🚀 New features to boost your workflow:

• ❄️ Test Analytics: Detect flaky tests, report on failures, and find test suite problems.

[reta]

Merging with Detect Breaking Changes failing, should be fixed by #21500 and not related to this change