Skip to content

Conversation

dependabot[bot]
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Jul 7, 2021

Bumps jackson.version from 2.12.3 to 2.12.4.
Updates jackson-annotations from 2.12.3 to 2.12.4

Commits

Updates jackson-core from 2.12.3 to 2.12.4

Commits
  • d94eae7 [maven-release-plugin] prepare release jackson-core-2.12.4
  • 6671310 Prepare for 2.12.4 release
  • 8c038fb Fix #702
  • 3c386bf Add branch allow-list back in travis settings
  • 6fb05c8 Back to snapshots for 2.12
  • c723c3c [maven-release-plugin] prepare for next development iteration
  • See full diff in compare view

Updates jackson-databind from 2.12.3 to 2.12.4

Commits

Updates jackson-dataformat-yaml from 2.12.3 to 2.12.4

Commits

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot merge will merge this PR after your CI passes on it
  • @dependabot squash and merge will squash and merge this PR after your CI passes on it
  • @dependabot cancel merge will cancel a previously requested merge and block automerging
  • @dependabot reopen will reopen this PR if it is closed
  • @dependabot close will close this PR and stop Dependabot recreating it. You can achieve the same result by closing it manually
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps `jackson.version` from 2.12.3 to 2.12.4.

Updates `jackson-annotations` from 2.12.3 to 2.12.4
- [Release notes](https://github.com/FasterXML/jackson/releases)
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `jackson-core` from 2.12.3 to 2.12.4
- [Release notes](https://github.com/FasterXML/jackson-core/releases)
- [Commits](FasterXML/jackson-core@jackson-core-2.12.3...jackson-core-2.12.4)

Updates `jackson-databind` from 2.12.3 to 2.12.4
- [Release notes](https://github.com/FasterXML/jackson/releases)
- [Commits](https://github.com/FasterXML/jackson/commits)

Updates `jackson-dataformat-yaml` from 2.12.3 to 2.12.4
- [Release notes](https://github.com/FasterXML/jackson-dataformats-text/releases)
- [Commits](FasterXML/jackson-dataformats-text@jackson-dataformats-text-2.12.3...jackson-dataformats-text-2.12.4)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-annotations
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-type: direct:production
  update-type: version-update:semver-patch
- dependency-name: com.fasterxml.jackson.dataformat:jackson-dataformat-yaml
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <[email protected]>
@dependabot dependabot bot added the dependencies Pull requests that update a dependency file label Jul 7, 2021
@robot-simplify4u robot-simplify4u enabled auto-merge (rebase) July 7, 2021 00:01
@sonarqubecloud
Copy link

sonarqubecloud bot commented Jul 8, 2021

Kudos, SonarCloud Quality Gate passed!

Bug A 0 Bugs
Vulnerability A 0 Vulnerabilities
Security Hotspot A 0 Security Hotspots
Code Smell A 0 Code Smells

No Coverage information No Coverage information
0.0% 0.0% Duplication

@robot-simplify4u robot-simplify4u merged commit 74c1148 into master Jul 8, 2021
@robot-simplify4u robot-simplify4u deleted the dependabot/maven/jackson.version-2.12.4 branch July 8, 2021 14:19
pzygielo pushed a commit to pzygielo/pgpverify-maven-plugin that referenced this pull request May 31, 2024
In change 4c5e9ea we introduced code that in some case tries illegal "lock upgrade", that due lack of MRESOLVER-220 went unnoticed.

This change merely undoes the changes for DefaultArtifactResolver and DefaultMetadataResolver (will as before, use exclusive SyncContext immediately, not be "optimistic"), while change for DefaultDeploy is still correct.

---

https://issues.apache.org/jira/browse/MRESOLVER-373
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment
Labels
dependencies Pull requests that update a dependency file
Development

Successfully merging this pull request may close these issues.

1 participant