From a69a7c1bc472f43d26ea88da662f948b25bdc923 Mon Sep 17 00:00:00 2001 From: Chris Kipp Date: Mon, 8 Aug 2022 11:57:48 +0200 Subject: [PATCH] dep: bump to latest jackson 2.13.3 There are some security vulnerabilities associated with older jackson versions. People mentioned starting to see this in their projects after adding sbt-dependency-submission in their Scala 3 projects. ref: https://github.com/scalacenter/sbt-dependency-submission/issues/49 --- project/Dependencies.scala | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index 0d1e4f2786dc..3708ec528c79 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -4,7 +4,7 @@ import sbt._ * to ensure the same version of the dependency is used in all projects */ object Dependencies { - private val jacksonVersion = "2.12.1" + private val jacksonVersion = "2.13.3" val `jackson-databind` = "com.fasterxml.jackson.core" % "jackson-databind" % jacksonVersion val `jackson-dataformat-yaml` =