Skip to content

Bump tools.jackson.core:jackson-databind from 3.2.1 to 3.2.3 - #376

Merged
deweyjose merged 1 commit into
mainfrom
dependabot/maven/tools.jackson.core-jackson-databind-3.2.3
Oct 13, 2026
Merged

deweyjose merged 1 commit into
mainfrom
dependabot/maven/tools.jackson.core-jackson-databind-3.2.3

Conversation

@dependabot

@dependabot dependabot Bot commented on behalf of github Oct 13, 2026

Copy link
Copy Markdown
Contributor

Bumps tools.jackson.core:jackson-databind from 3.2.1 to 3.2.3.

Commits
  • 4179a66 [maven-release-plugin] prepare release jackson-databind-3.2.3
  • 37c8a72 Prep for 3.2.3 release
  • 5fa7881 Merge branch '3.1' into 3.2
  • c9f17a2 Post-release dep version bump
  • 1ea1c40 [maven-release-plugin] prepare for next development iteration
  • 2968e8f [maven-release-plugin] prepare release jackson-databind-3.1.7
  • d61810b Prep for 3.1.7 release
  • e065a09 Merge branch '2.x' into 3.1
  • fd189a7 Merge branch '2.22' into 2.x
  • 211faf7 Post-release dep version bump
  • Additional commits viewable in compare view

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [tools.jackson.core:jackson-databind](https://github.com/FasterXML/jackson-databind) from 3.2.1 to 3.2.3.
- [Commits](FasterXML/jackson-databind@jackson-databind-3.2.1...jackson-databind-3.2.3)

---
updated-dependencies:
- dependency-name: tools.jackson.core:jackson-databind
  dependency-version: 3.2.3
  dependency-type: direct:production
  update-type: version-update:semver-patch
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot Bot added dependencies Pull requests that update a dependency file java Pull requests that update java code labels Oct 13, 2026
@github-actions

Copy link
Copy Markdown
Contributor

Code Coverage Report

Overall Project 95.19% 🍏

There is no coverage information present for the Files changed

@deweyjose deweyjose left a comment

Copy link
Copy Markdown
Owner

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

Summary

Dependabot patch bump of tools.jackson.core:jackson-databind 3.2.1 → 3.2.3 in examples/graphqlcodegen-example/kotlin-jackson3/pom.xml:24 (the tools-jackson.version property). Single file, 1 insertion / 1 deletion, dependency-metadata only. This module exists solely to exercise the jacksonVersions parameter end-to-end (generate Kotlin + deserialize real JSON through a Jackson 3 ObjectMapper).

Build result

CI is not trustworthy here (Java CI doesn't run on fork PRs), so I built locally against this HEAD (e4372d6):

  • ./mvnw -B -ntp clean install -Dcodegen.server.schemaUrl=http://localhost:8000/main.graphqls → BUILD SUCCESS (full reactor: plugin + all 5 example modules). kotlin-jackson3's Jackson3DeserializationTest ran green (2/2), so the bumped jackson-databind 3.2.3 is actually deserialized at runtime, not merely compiled.
  • ./mvnw -B -ntp spotless:check -pl graphqlcodegen-maven-plugin → BUILD SUCCESS (XML-only change; no Java formatting impact).

Wiring completeness

N/A — no new/changed @Parameter, no touch to Codegen.java, CodegenConfigProvider, CodegenExecutor, or CodeGenConfigBuilder. No boolean-gap risk.

Backwards compatibility

Not breaking. The change lives entirely in an example/test module. Release is scoped to -pl graphqlcodegen-maven-plugin (publish.yaml), so no published artifact and no consumer depends on this module. jackson-databind is not on the generation path (graphql-dgs-codegen-core / kotlinpoet / graphql-java), so generated output is unaffected. No @Parameter removed/renamed/retyped, no default changed, no Java/Maven floor or goal/phase change, no consumer-facing transitive altered.

Risks

Negligible. A Jackson patch could in principle shift deserialization behavior, but Jackson3DeserializationTest passes against 3.2.3, covering the one path this module cares about.

Verdict

APPROVE. Meets all Dependabot auto-merge conditions (dependabot author, semver-patch, off generation-path, pom-only, local verify-superset build clean, no breaking-change label). Merging.


Generated by Claude Code

@deweyjose
deweyjose merged commit 667e94f into main Oct 13, 2026
4 checks passed
@dependabot
dependabot Bot deleted the dependabot/maven/tools.jackson.core-jackson-databind-3.2.3 branch October 13, 2026 13:43
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant