exclude jackson-core 2.22.0 from muzzle#11517
Conversation
There was a problem hiding this comment.
💡 Codex Review
Here are some automated review suggestions for this pull request.
Reviewed commit: 067150d816
ℹ️ About Codex in GitHub
Your team has set up Codex to review pull requests in this repo. Reviews are triggered when you
- Open a pull request for review
- Mark a draft as ready
- Comment "@codex review".
If Codex has suggestions, it will comment; otherwise it will react with 👍.
Codex can also answer questions or update the PR. Try commenting "@codex address that feedback".
| group = 'com.fasterxml.jackson.core' | ||
| module = 'jackson-databind' | ||
| versions = "[2.0.0,)" | ||
| skipVersions = ['2.22.0'] // missing in Maven Central |
There was a problem hiding this comment.
Exclude the bad Jackson version from latestDepTest too
This only removes jackson-databind:2.22.0 from the muzzle version scan; the same project still has latestDepTestImplementation ... jackson-databind: '2.+', so the latest-dependency test configuration can still select 2.22.0 and then fail resolving its missing jackson-core:2.22.0 transitive dependency. Please also reject/pin this version for the latestDepTest dependency path, otherwise the CI failure this change is trying to avoid can remain.
Useful? React with 👍 / 👎.
|
There was a problem hiding this comment.
FYI, it seems there's a publication issue with sonatype FasterXML/jackson-core#1617
What Does This Do
jackson-core 2.22.0 is referenced by jackson-databind 2.22.0 but it's missing
Motivation
Additional Notes
Contributor Checklist
type:and (comp:orinst:) labels in addition to any other useful labelsclose,fix, or any linking keywords when referencing an issueUse
solvesinstead, and assign the PR milestone to the issue/merge. You can also:/merge --commit-message "..."/merge -c/merge -f --reason "reason"; please use this judiciously, as some checks do not run at the PR-levelJira ticket: [PROJ-IDENT]