Skip to content

Pin version of jackson-dataformat-xml transitive deps#16912

Closed
ksobolew wants to merge 1 commit intotrinodb:masterfrom
ksobolew:kudi/pin-all-jackson-module-versions
Closed

Pin version of jackson-dataformat-xml transitive deps#16912
ksobolew wants to merge 1 commit intotrinodb:masterfrom
ksobolew:kudi/pin-all-jackson-module-versions

Conversation

@ksobolew
Copy link
Copy Markdown
Contributor

@ksobolew ksobolew commented Apr 6, 2023

Description

This is a transitive dependency of a transitive dependency, but it's there and is the only one of the Jackson family which is not pinned to the dep.jackson.version version.

Additional context and related issues

Should be obsoleted by airlift/airbase#346

Release notes

(x) This is not user-visible or docs only and no release notes are required.
( ) Release notes are required, please propose a release note for me.
( ) Release notes are required, with the following suggested text:

# Section
* Fix some things. ({issue}`issuenumber`)

@ksobolew ksobolew force-pushed the kudi/pin-all-jackson-module-versions branch from c63d3e2 to d392a9c Compare April 7, 2023 08:01
Copy link
Copy Markdown
Member

@hashhar hashhar left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

LGTM

some future proofing ideas, no changes requested

pom.xml Outdated
Copy link
Copy Markdown
Member

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

do we need this for every new transitive dependency we pull? Does jackson provide a bom that we can import?

Copy link
Copy Markdown
Contributor Author

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Actually, they do! But I would consider this to be temporary and doing the proper solution in Airbase - I'll update airlift/airbase#346 to use it. Thanks for pointing this out!

This is a transitive dependency of a transitive dependency, but it's
there and is the only one of the Jackson family which is not pinned to
the `dep.jackson.version` version.
@ksobolew ksobolew force-pushed the kudi/pin-all-jackson-module-versions branch from d392a9c to 7227b50 Compare April 7, 2023 12:00
@ksobolew
Copy link
Copy Markdown
Contributor Author

Obsoleted by #16971

@ksobolew ksobolew closed this Apr 12, 2023
@ksobolew ksobolew deleted the kudi/pin-all-jackson-module-versions branch April 12, 2023 08:19
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Development

Successfully merging this pull request may close these issues.

3 participants