Skip to content

build: bump jackson-databind and tomcat-annotations-api versions - #931

Merged
mc-nv merged 1 commit into
r26.09from
mchornyi/TRI-1864/address-security-scans
Sep 16, 2026
Merged

mc-nv merged 1 commit into
r26.09from
mchornyi/TRI-1864/address-security-scans

Conversation

@mc-nv

@mc-nv mc-nv commented Sep 16, 2026

Copy link
Copy Markdown
Contributor

What does the PR do?

Bumps jackson-databind and tomcat-annotations-api dependency versions in the Java client.

Checklist

  • PR title reflects the change and is of format <commit_type>: <Title>
  • Changes are described in the pull request.
  • Related issues are referenced.
  • Populated github labels field
  • Added test plan and verified test passes.
  • Verified that the PR passes existing CI.
  • Verified copyright is correct on all changed files.
  • Added succinct git squash message before merging.
  • All template sections are filled out.
  • Optional: Additional screenshots for behavior/output changes with before/after.

Commit Type:

  • build

Related PRs:

Where should the reviewer start?

  • src/java/pom.xml
  • src/grpc_generated/java/library/pom.xml
  • src/grpc_generated/java/examples/pom.xml

Test plan:

  • Built Java client modules with updated dependency versions.

  • CI Pipeline ID:

Caveats:

Background

Related Issues: (use one of the action keywords Closes / Fixes / Resolves / Relates to)

  • Resolves: TRI-1864

@mc-nv mc-nv added the build Build system or external dependencies (build: PRs) label Sep 16, 2026
@mc-nv mc-nv self-assigned this Sep 16, 2026
Update jackson-databind to 2.22.2 and tomcat-annotations-api to
11.0.25 in the Java client dependencies.
@mc-nv
mc-nv force-pushed the mchornyi/TRI-1864/address-security-scans branch from 42b90fc to a40703b Compare September 16, 2026 18:11
@mc-nv
mc-nv marked this pull request as ready for review September 16, 2026 18:12
@greptile-apps

greptile-apps Bot commented Sep 16, 2026

Copy link
Copy Markdown

RetriggerConfidence Score: 5/5

The dependency-only updates appear safe to merge, with no concrete correctness, security, or build failure identified.

Summary

This PR updates pinned Java dependency versions without changing application behavior:

  • Updates jackson-databind from 2.21.4 to 2.22.2 in the Java client.
  • Updates tomcat-annotations-api from 11.0.24 to 11.0.25 in the generated gRPC library and examples.
  • Preserves the existing dependency scopes and Java compilation settings.

Reviews (1) · Last reviewed commit: "build: bump jackson-databind and tomcat-..."

@mc-nv
mc-nv merged commit 5008411 into r26.09 Sep 16, 2026
4 checks passed
@mc-nv
mc-nv deleted the mchornyi/TRI-1864/address-security-scans branch September 16, 2026 18:31
@mc-nv mc-nv mentioned this pull request Oct 1, 2026
7 of 10 tasks
mc-nv added a commit that referenced this pull request Oct 1, 2026
* build: bump jackson-databind and tomcat-annotations-api versions (#931)

Update jackson-databind to 2.22.2 and tomcat-annotations-api to
11.0.25 in the Java client dependencies.

* chore: Bump Tomcat version (#932)
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

build Build system or external dependencies (build: PRs)

Development

Successfully merging this pull request may close these issues.

2 participants