[mc-nv]

What does the PR do?

• Bump jackson-databind 2.22.2 -> 2.22.4 in the Java client
• Address security scan findings for the 26.10 release

Checklist

• PR title reflects the change and is of format <commit_type>: <Title>
• Changes are described in the pull request.
• Related issues are referenced.
• Populated github labels field
• Added test plan and verified test passes.
• Verified that the PR passes existing CI.
• Verified copyright is correct on all changed files.
• Added succinct git squash message before merging ref.
• All template sections are filled out.
• Optional: Additional screenshots for behavior/output changes with before/after.

Related PRs:

• chore: Bump click and transformers versions tutorials#177

Where should the reviewer start?

• src/java/pom.xml

Test plan:

• CI Pipeline ID:

Caveats:

Background

Related Issues: (use one of the action keywords Closes / Fixes / Resolves / Relates to)

• Resolves: TRI-1979

[greptile-apps]

Confidence Score: 5/5

[Medium impact] The dependency update appears safe to merge based on the code reviewed.

Summary

Updates the Java client's jackson-databind dependency from 2.22.2 to 2.22.4.

• The Java client builds with jackson-databind 2.22.4.

_{Reviews (1) · Last reviewed commit: "chore: Bumping jackson-databind versions" · Reviewed by Greptile}