Repository navigation
Bump tools.jackson.core:jackson-databind from 3.2.3 to 3.2.4 - #385
Conversation
Bumps [tools.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) from 3.2.3 to 3.2.4. - [Commits](FasterXML/jackson-databind@jackson-databind-3.2.3...jackson-databind-3.2.4) --- updated-dependencies: - dependency-name: tools.jackson.core:jackson-databind dependency-version: 3.2.4 dependency-type: direct:production update-type: version-update:semver-patch ... Signed-off-by: dependabot[bot] <support@github.com>
Code Coverage Report
|
deweyjose
left a comment
There was a problem hiding this comment.
Summary
Dependabot patch bump of tools.jackson.core:jackson-databind 3.2.3 → 3.2.4, limited to a single line in examples/graphqlcodegen-example/kotlin-jackson3/pom.xml:24 (the tools-jackson.version property). This is the vendored example module that exercises the jacksonVersions → Jackson 3 (tools.jackson) generation path end to end. One file, +1/−1.
Build result
Ran locally against this PR head (de95135), full reactor so the changed module is actually exercised:
./mvnw -B -ntp clean install -Dcodegen.server.schemaUrl=http://localhost:8000/main.graphqls→ BUILD SUCCESS. Thekotlin-jackson3module generated, compiled, and itsJackson3DeserializationTest(2 tests) passed against jackson-databind 3.2.4../mvnw -B -ntp spotless:check -pl graphqlcodegen-maven-plugin→ BUILD SUCCESS.
Repo CI check-runs on the head SHA are also green (build, build (test), e2e, build (spotless)).
Wiring completeness
N/A — no new @Parameter/option and no changes to Codegen.java, CodegenConfigProvider, CodegenExecutor, or CodeGenConfigBuilder. Pure dependency-version bump in an example pom.
Backwards compatibility
Not breaking.
- No
@Parameteradded/removed/renamed/retyped; no default changed; no goal/phase/Java/Maven change. - Not on the generation path — the generation-path deps are
graphql-dgs-codegen-core,kotlinpoet, andgraphql-java;jackson-databindis none of these. - No consumer impact: this dependency lives only in the
kotlin-jackson3example module, which never ships to Maven Central. The published plugin's own Jackson iscom.fasterxml.jackson(BOM 2.22.4,graphqlcodegen-maven-plugin/pom.xml:59) and is untouched. Generated output shape is driven by thejacksonVersionparameter, not by this databind version.
Risks
Minimal. Patch-level bump of a test/runtime dependency in an example harness; validated by the module's own Jackson 3 deserialization test.
Verdict
APPROVE — meets every Dependabot auto-merge condition (dependabot[bot] author, patch bump, off the generation path, build green, change limited to pom dependency metadata, not labeled breaking-change). Merging.
Generated by Claude Code
Bumps tools.jackson.core:jackson-databind from 3.2.3 to 3.2.4.
Commits
461f8ec[maven-release-plugin] prepare release jackson-databind-3.2.42a502c9Prep for 3.2.4 release64a4813Merge branch '3.1' into 3.25d64697Post-release dep version bump9b5fe86[maven-release-plugin] prepare for next development iteration893c391[maven-release-plugin] prepare release jackson-databind-3.1.822442d0Prep for 3.1.8 releasedf230c1Merge branch '2.x' into 3.169ddc80Merge branch '2.22' into 2.x72bb78ePost-release dep version bumpDependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)