From 829398ddbea9f39c20c612ea34a3287de009e71f Mon Sep 17 00:00:00 2001
From: "renovate[bot]" <29139614+renovate[bot]@users.noreply.github.com>
Date: Fri, 18 Sep 2026 23:38:54 +0000
Subject: [PATCH 1/2] fix(deps): update dependency
 com.fasterxml.jackson.core:jackson-core to v2.22.2

---
 gradle.properties | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/gradle.properties b/gradle.properties
index 2d44c0c8..bc901f2b 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -20,7 +20,7 @@ httpclientVersion=3.1
 httpcomponentsVersion=4.5.14
 hsqldbVersion=2.7.4
 jacksonDatabindVersion=2.22.2
-jacksonVersion=2.22
+jacksonVersion=2.22.2
 janinoVersion=3.1.12
 jasyptVersion=1.9.3
 # Match the jjwt version pulled in transitively by uPortal-soffit-core.

From 2439f2ebc27ec94c9bd664d13d812d9ec47bb26d Mon Sep 17 00:00:00 2001
From: Bill Smith <wsmith@unicon.net>
Date: Fri, 18 Sep 2026 19:45:14 -0400
Subject: [PATCH 2/2] fix(deps): pin jackson-annotations independently of
 core/databind

Renovate's jackson bump set jacksonVersion=2.22.2, which also drove
jackson-annotations. As of Jackson 2.20, FasterXML no longer cuts patch
releases of jackson-annotations (its API is stable), so 2.22.2 does not
exist for that artifact and the build failed to resolve
jackson-annotations:2.22.2.

Introduce a separate jacksonAnnotationsVersion (2.22, the latest
published annotations release) and point the jackson-annotations
dependency at it, keeping jackson-core/databind at 2.22.2.

Verified: ./gradlew build succeeds; classpath resolves
jackson-annotations:2.22 + jackson-core/databind:2.22.2.
---
 gradle.properties                     | 5 +++++
 notification-portlet-api/build.gradle | 2 +-
 2 files changed, 6 insertions(+), 1 deletion(-)

diff --git a/gradle.properties b/gradle.properties
index bc901f2b..d4ef248e 100644
--- a/gradle.properties
+++ b/gradle.properties
@@ -19,6 +19,11 @@ hibernateVersion=5.6.15.Final
 httpclientVersion=3.1
 httpcomponentsVersion=4.5.14
 hsqldbVersion=2.7.4
+# jackson-annotations is versioned independently of core/databind: as of
+# Jackson 2.20 FasterXML stopped cutting patch releases of jackson-annotations
+# (its API is stable), so it only ships as 2.22 while core/databind get 2.22.x
+# patches. Keep this on the latest existing annotations release.
+jacksonAnnotationsVersion=2.22
 jacksonDatabindVersion=2.22.2
 jacksonVersion=2.22.2
 janinoVersion=3.1.12
diff --git a/notification-portlet-api/build.gradle b/notification-portlet-api/build.gradle
index 84ab1636..94afa435 100644
--- a/notification-portlet-api/build.gradle
+++ b/notification-portlet-api/build.gradle
@@ -1,7 +1,7 @@
 description = "Simple data model for Notifications used in integrations"
 
 dependencies {
-    compile "com.fasterxml.jackson.core:jackson-annotations:${jacksonVersion}"
+    compile "com.fasterxml.jackson.core:jackson-annotations:${jacksonAnnotationsVersion}"
     compile "com.fasterxml.jackson.core:jackson-core:${jacksonVersion}"
     compile "com.fasterxml.jackson.core:jackson-databind:${jacksonDatabindVersion}"
     compile "commons-lang:commons-lang:${commonsLangVersion}"