Skip to content
Closed
Changes from all commits
Commits
File filter

Filter by extension

Filter by extension

Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
6 changes: 3 additions & 3 deletions build.gradle
Original file line number Diff line number Diff line change
Expand Up @@ -49,9 +49,9 @@ subprojects {
api 'com.carrotsearch.thirdparty:simple-xml-safe:2.7.1'
api 'com.google.guava:guava:33.6.0-jre'
api 'com.squareup.okhttp3:okhttp:5.3.2'
api 'com.fasterxml.jackson.core:jackson-annotations:2.21'
api 'com.fasterxml.jackson.core:jackson-core:2.21.2'
api 'com.fasterxml.jackson.core:jackson-databind:2.21.2'
api 'com.fasterxml.jackson.core:jackson-annotations:2.22'
api 'com.fasterxml.jackson.core:jackson-core:2.22.1'
api 'com.fasterxml.jackson.core:jackson-databind:2.22.1'
Comment on lines +52 to +54

Copy link
Copy Markdown

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

🗄️ Data Integrity & Integration | 🟠 Major | ⚡ Quick win

🧩 Analysis chain

🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Inspect the relevant dependency declarations in build.gradle
grep -nE "jackson-(annotations|core|databind|datatype-jsr310)" build.gradle || true

echo
echo "Context around the jackson-datatype-jsr310 declaration:"
sed -n '235,260p' build.gradle

echo
echo "Context around the Jackson core/databind declarations:"
sed -n '45,60p' build.gradle

Repository: minio/minio-java

Length of output: 2081


🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Look for any Jackson BOM, version constraints, or forced resolution rules
rg -n --hidden --glob '!*.git/*' \
  -e "jackson-bom" \
  -e "platform\\(" \
  -e "enforcedPlatform\\(" \
  -e "resolutionStrategy" \
  -e "force 'com\\.fasterxml\\.jackson" \
  -e "com\\.fasterxml\\.jackson" \
  build.gradle settings.gradle gradle.properties . || true

echo
echo "Files containing jackson references:"
git ls-files | rg '(^|/)build\.gradle$|(^|/)settings\.gradle$|(^|/)gradle\.properties$|jackson|gradle/libs\.versions\.toml'

Repository: minio/minio-java

Length of output: 11252


🏁 Script executed:

#!/bin/bash
set -euo pipefail

# Show the full dependency blocks that mention Jackson
awk '
  BEGIN { show=0; n=0 }
  /dependencies \{/ { n++; if (n<=3) {show=1; print "\n=== dependencies block " n " starts at line " NR " ===" } }
  show { print NR ":" $0 }
  /^\s*\}/ { if (show) { print "=== block ends at line " NR " ==="; show=0 } }
' build.gradle | sed -n '1,220p'

echo
echo "Search for resolution/constraint/substitution logic involving Jackson:"
rg -n -C 3 \
  "resolutionStrategy|constraints \{|force |dependencySubstitution|platform\(|enforcedPlatform\(|jackson-datatype-jsr310|jackson-annotations|jackson-core|jackson-databind" \
  build.gradle settings.gradle || true

Repository: minio/minio-java

Length of output: 2580


Align the Jackson module versions. build.gradle:249 still pins jackson-datatype-jsr310 to 2.21.2 while the other Jackson artifacts are on 2.22.1; keep the modules on the same release line to avoid runtime compatibility issues.

🤖 Prompt for AI Agents
Verify each finding against current code. Fix only still-valid issues, skip the
rest with a brief reason, keep changes minimal, and validate.

In `@build.gradle` around lines 52 - 54, Update the jackson-datatype-jsr310
dependency declaration to version 2.22.1, matching the jackson-core and
jackson-databind versions while preserving the existing dependency
configuration.

api 'org.bouncycastle:bcprov-jdk18on:1.84'
api 'org.apache.commons:commons-compress:1.28.0'
api 'commons-codec:commons-codec:1.21.0'
Expand Down