Skip to content

Upgrade Jackson, BC provider, JLine, SnakeYAML, Micrometer and JUnit - #777

Merged
ar merged 1 commit into
mainfrom
chore/dependencies-20260908
Sep 8, 2026
Merged

ar merged 1 commit into
mainfrom
chore/dependencies-20260908

Conversation

@ar-agt

@ar-agt ar-agt commented Sep 8, 2026

Copy link
Copy Markdown
Collaborator

Summary

Upgrade the dependency groups selected in the dependency review:

Dependency Previous Updated
Jackson (core, databind, JSR310, XML) 2.22.1 2.22.2
Bouncy Castle provider 1.85 1.85.2
JLine 4.3.1 4.4.3
SnakeYAML 2.6 2.7
Micrometer core and Prometheus registry 1.17.0 1.17.1
JUnit Jupiter/Platform 6.1.2 6.1.3

Keep bcpg and bcutil at 1.85: 1.85.2 is a provider-only release. Give bcprov its own version and declare it explicitly so both the runtime and published Maven dependency list select the provider patch.

Validation

  • Java 26.0.2-amzn and Gradle 9.7.1 selected from .sdkmanrc.
  • Clean local test suite: 4,436 tests reported; zero failures/errors, 69 skipped.
  • Local jpos:check and jpos:assemble.
  • Generated Maven POM and resolved runtime dependencies checked for bcprov 1.85.2, bcpg/bcutil 1.85, and the upgraded library versions.
  • git diff --check.

No manual cross-platform interactive-terminal testing performed. JLine 4.4 changes the ambiguous-key binding timeout from 1,000 to 100 ms; SnakeYAML 2.7 removes Compact Object Notation, which is not used in the jPOS source tree.

Upstream notes

@ar
ar merged commit 91c3ac1 into main Sep 8, 2026
1 check passed
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

2 participants