From 78ebadc83cb9b498a8caec68fa3021bc8ac0e0b3 Mon Sep 17 00:00:00 2001 From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com> Date: Tue, 30 Jun 2026 10:23:42 +0000 Subject: [PATCH 1/2] Bump com.fasterxml.jackson.core:jackson-databind Bumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) from 2.12.7.1 to 2.22.0. - [Commits](https://github.com/FasterXML/jackson/commits) --- updated-dependencies: - dependency-name: com.fasterxml.jackson.core:jackson-databind dependency-version: 2.22.0 dependency-type: direct:production ... Signed-off-by: dependabot[bot] --- wdl-parsing/WDLParsingFunction/pom.xml | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/wdl-parsing/WDLParsingFunction/pom.xml b/wdl-parsing/WDLParsingFunction/pom.xml index b77cac3..808ce51 100644 --- a/wdl-parsing/WDLParsingFunction/pom.xml +++ b/wdl-parsing/WDLParsingFunction/pom.xml @@ -138,7 +138,7 @@ com.fasterxml.jackson.core jackson-databind - 2.12.7.1 + 2.22.0 org.openapitools From 4d3486a5c61b560fdbde2a1ef587c8e1d449e3df Mon Sep 17 00:00:00 2001 From: Denis Yuen Date: Thu, 9 Jul 2026 14:21:40 -0400 Subject: [PATCH 2/2] use bom correctly and bump dependency checker plugin --- .../THIRD-PARTY-LICENSES.txt | 16 +++++++------- wdl-parsing/WDLParsingFunction/pom.xml | 21 ++++++++++++------- 2 files changed, 21 insertions(+), 16 deletions(-) diff --git a/wdl-parsing/WDLParsingFunction/THIRD-PARTY-LICENSES.txt b/wdl-parsing/WDLParsingFunction/THIRD-PARTY-LICENSES.txt index 3772c59..cac6c88 100644 --- a/wdl-parsing/WDLParsingFunction/THIRD-PARTY-LICENSES.txt +++ b/wdl-parsing/WDLParsingFunction/THIRD-PARTY-LICENSES.txt @@ -101,19 +101,19 @@ Lists of 191 third-party dependencies. (The Apache Software License, Version 2.0) J2ObjC Annotations (com.google.j2objc:j2objc-annotations:1.3 - https://github.com/google/j2objc/) (The Apache Software License, Version 2.0) Jackson 2 extensions to the Google APIs Client Library for Java (com.google.api-client:google-api-client-jackson2:1.33.2 - https://github.com/googleapis/google-api-java-client/google-api-client-jackson2) (The Apache Software License, Version 2.0) Jackson 2 extensions to the Google HTTP Client Library for Java. (com.google.http-client:google-http-client-jackson2:1.41.4 - https://github.com/googleapis/google-http-java-client/google-http-client-jackson2) - (The Apache Software License, Version 2.0) Jackson datatype: JSR310 (com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.12.3 - https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310) - (The Apache Software License, Version 2.0) Jackson module: JAXB Annotations (com.fasterxml.jackson.module:jackson-module-jaxb-annotations:2.12.2 - https://github.com/FasterXML/jackson-modules-base) - (The Apache Software License, Version 2.0) Jackson-annotations (com.fasterxml.jackson.core:jackson-annotations:2.12.3 - http://github.com/FasterXML/jackson) - (The Apache Software License, Version 2.0) Jackson-core (com.fasterxml.jackson.core:jackson-core:2.12.7 - https://github.com/FasterXML/jackson-core) - (The Apache Software License, Version 2.0) jackson-databind (com.fasterxml.jackson.core:jackson-databind:2.12.7.1 - http://github.com/FasterXML/jackson) + (The Apache Software License, Version 2.0) Jackson datatype: JSR310 (com.fasterxml.jackson.datatype:jackson-datatype-jsr310:2.22.0 - https://github.com/FasterXML/jackson-modules-java8/jackson-datatype-jsr310) + (The Apache Software License, Version 2.0) Jackson module: Old JAXB Annotations (javax.xml.bind) (com.fasterxml.jackson.module:jackson-module-jaxb-annotations:2.22.0 - https://github.com/FasterXML/jackson-modules-base) + (The Apache Software License, Version 2.0) Jackson-annotations (com.fasterxml.jackson.core:jackson-annotations:2.22 - https://github.com/FasterXML/jackson) + (The Apache Software License, Version 2.0) Jackson-core (com.fasterxml.jackson.core:jackson-core:2.22.0 - https://github.com/FasterXML/jackson-core) + (The Apache Software License, Version 2.0) jackson-databind (com.fasterxml.jackson.core:jackson-databind:2.22.0 - https://github.com/FasterXML/jackson) + (EDL 1.0) Jakarta Activation API jar (jakarta.activation:jakarta.activation-api:1.2.2 - https://github.com/eclipse-ee4j/jaf/jakarta.activation-api) (EPL 2.0) (GPL2 w/ CPE) Jakarta Annotations API (jakarta.annotation:jakarta.annotation-api:1.3.5 - https://projects.eclipse.org/projects/ee4j.ca) (EPL 2.0) (GPL2 w/ CPE) jakarta.ws.rs-api (jakarta.ws.rs:jakarta.ws.rs-api:2.1.6 - https://github.com/eclipse-ee4j/jaxrs-api) - (Eclipse Distribution License - v 1.0) jakarta.xml.bind-api (jakarta.xml.bind:jakarta.xml.bind-api:2.3.2 - https://github.com/eclipse-ee4j/jaxb-api/jakarta.xml.bind-api) (BSD-3-Clause) janino (org.codehaus.janino:janino:3.1.7 - http://janino-compiler.github.io/janino/) (The Apache Software License, Version 2.0) Java 6 (and higher) Extensions to the Google API Client Library for Java. (com.google.api-client:google-api-client-java6:1.33.2 - https://github.com/googleapis/google-api-java-client/google-api-client-java6) (The Apache Software License, Version 2.0) Java 6 (and higher) extensions to the Google OAuth Client Library for Java. (com.google.oauth-client:google-oauth-client-java6:1.33.0 - https://github.com/googleapis/google-oauth-java-client/google-oauth-client-java6) + (CDDL 1.1) (GPL2 w/ CPE) Java Architecture for XML Binding (javax.xml.bind:jaxb-api:2.2.12 - http://jaxb.java.net/) (Apache-2.0) (LGPL-2.1-or-later) Java Native Access (net.java.dev.jna:jna:5.9.0 - https://github.com/java-native-access/jna) - (EDL 1.0) JavaBeans Activation Framework API jar (jakarta.activation:jakarta.activation-api:1.2.1 - https://github.com/eclipse-ee4j/jaf/jakarta.activation-api) (Apache 2) JavaEWAH (com.googlecode.javaewah:JavaEWAH:1.1.13 - https://github.com/lemire/javaewah) (EPL 2.0) (GPL2 w/ CPE) javax.inject:1 as OSGi bundle (org.glassfish.hk2.external:jakarta.inject:2.6.1 - https://github.com/eclipse-ee4j/glassfish-hk2/external/jakarta.inject) (Apache License, Version 2.0) JCL 1.2 implemented over SLF4J (org.slf4j:jcl-over-slf4j:1.7.32 - http://www.slf4j.org) @@ -190,4 +190,4 @@ Lists of 191 third-party dependencies. (WDL License https://github.com/openwdl/wdl/blob/master/LICENSE) wdl-biscayne (org.broadinstitute:wdl-biscayne_2.13:85 - no url defined) (WDL License https://github.com/openwdl/wdl/blob/master/LICENSE) wdl-draft2 (org.broadinstitute:wdl-draft2_2.13:85 - no url defined) (WDL License https://github.com/openwdl/wdl/blob/master/LICENSE) wdl-draft3 (org.broadinstitute:wdl-draft3_2.13:85 - no url defined) - (Unknown license) womtool (org.broadinstitute:womtool_2.13:85 - no url defined) + (Cromwell License https://github.com/broadinstitute/cromwell/blob/develop/LICENSE.txt) womtool (org.broadinstitute:womtool_2.13:85 - no url defined) diff --git a/wdl-parsing/WDLParsingFunction/pom.xml b/wdl-parsing/WDLParsingFunction/pom.xml index 808ce51..e09a274 100644 --- a/wdl-parsing/WDLParsingFunction/pom.xml +++ b/wdl-parsing/WDLParsingFunction/pom.xml @@ -7,10 +7,8 @@ jar WDL parser created for SAM CLI. - 11 - 11 2.34 - 2.12.3 + 2.22.0 5.7.2 3.0.0-M5 @@ -48,6 +46,17 @@ https://artifacts.oicr.on.ca/artifactory/collab-release + + + + com.fasterxml.jackson + jackson-bom + ${jackson-version} + pom + import + + + com.amazonaws @@ -132,13 +141,10 @@ com.fasterxml.jackson.core jackson-annotations - ${jackson-version} com.fasterxml.jackson.core jackson-databind - - 2.22.0 org.openapitools @@ -148,7 +154,6 @@ com.fasterxml.jackson.datatype jackson-datatype-jsr310 - ${jackson-version} org.glassfish.jersey.core @@ -211,7 +216,7 @@ org.apache.maven.plugins maven-dependency-plugin - 3.1.2 + 3.11.0 true true