Skip to content

Bump tools.jackson.core:jackson-databind from 3.2.3 to 3.2.4 - #385

Merged
deweyjose merged 1 commit into
mainfrom
dependabot/maven/tools.jackson.core-jackson-databind-3.2.4
Nov 2, 2026
Merged

deweyjose merged 1 commit into
mainfrom
dependabot/maven/tools.jackson.core-jackson-databind-3.2.4

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Nov 2, 2026

Copy link
Copy Markdown
Contributor

Bumps tools.jackson.core:jackson-databind from 3.2.3 to 3.2.4.

Commits
  • 461f8ec [maven-release-plugin] prepare release jackson-databind-3.2.4
  • 2a502c9 Prep for 3.2.4 release
  • 64a4813 Merge branch '3.1' into 3.2
  • 5d64697 Post-release dep version bump
  • 9b5fe86 [maven-release-plugin] prepare for next development iteration
  • 893c391 [maven-release-plugin] prepare release jackson-databind-3.1.8
  • 22442d0 Prep for 3.1.8 release
  • df230c1 Merge branch '2.x' into 3.1
  • 69ddc80 Merge branch '2.22' into 2.x
  • 72bb78e Post-release dep version bump
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [tools.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) from 3.2.3 to 3.2.4.
- [Commits](FasterXML/jackson-databind@jackson-databind-3.2.3...jackson-databind-3.2.4)

---
updated-dependencies:
- dependency-name: tools.jackson.core:jackson-databind
  dependency-version: 3.2.4
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Nov 2, 2026
@github-actions

github-actions Bot commented Nov 2, 2026

Copy link
Copy Markdown
Contributor

Code Coverage Report

Overall Project 95.19% 🍏

There is no coverage information present for the Files changed

@deweyjose deweyjose left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary

Dependabot patch bump of tools.jackson.core:jackson-databind 3.2.3 → 3.2.4, limited to a single line in examples/graphqlcodegen-example/kotlin-jackson3/pom.xml:24 (the tools-jackson.version property). This is the vendored example module that exercises the jacksonVersions → Jackson 3 (tools.jackson) generation path end to end. One file, +1/−1.

Build result

Ran locally against this PR head (de95135), full reactor so the changed module is actually exercised:

  • ./mvnw -B -ntp clean install -Dcodegen.server.schemaUrl=http://localhost:8000/main.graphqls → BUILD SUCCESS. The kotlin-jackson3 module generated, compiled, and its Jackson3DeserializationTest (2 tests) passed against jackson-databind 3.2.4.
  • ./mvnw -B -ntp spotless:check -pl graphqlcodegen-maven-plugin → BUILD SUCCESS.

Repo CI check-runs on the head SHA are also green (build, build (test), e2e, build (spotless)).

Wiring completeness

N/A — no new @Parameter/option and no changes to Codegen.java, CodegenConfigProvider, CodegenExecutor, or CodeGenConfigBuilder. Pure dependency-version bump in an example pom.

Backwards compatibility

Not breaking.

  • No @Parameter added/removed/renamed/retyped; no default changed; no goal/phase/Java/Maven change.
  • Not on the generation path — the generation-path deps are graphql-dgs-codegen-core, kotlinpoet, and graphql-java; jackson-databind is none of these.
  • No consumer impact: this dependency lives only in the kotlin-jackson3 example module, which never ships to Maven Central. The published plugin's own Jackson is com.fasterxml.jackson (BOM 2.22.4, graphqlcodegen-maven-plugin/pom.xml:59) and is untouched. Generated output shape is driven by the jacksonVersion parameter, not by this databind version.

Risks

Minimal. Patch-level bump of a test/runtime dependency in an example harness; validated by the module's own Jackson 3 deserialization test.

Verdict

APPROVE — meets every Dependabot auto-merge condition (dependabot[bot] author, patch bump, off the generation path, build green, change limited to pom dependency metadata, not labeled breaking-change). Merging.


Generated by Claude Code

@deweyjose
deweyjose merged commit e8f1b13 into main Nov 2, 2026
4 checks passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant