You are viewing a plain text version of this content. The canonical link for it is here.
Posted to dev@zeppelin.apache.org by prabhjyotsingh <gi...@git.apache.org> on 2018/05/08 16:40:11 UTC
[GitHub] zeppelin pull request #2962: [ZEPPELIN-3447] Bump up version of jackson-data...
GitHub user prabhjyotsingh opened a pull request:
https://github.com/apache/zeppelin/pull/2962
[ZEPPELIN-3447] Bump up version of jackson-databind
### What is this PR for?
This is to upgrade the package jackson-databind libary to 2.27
### What type of PR is it?
[Improvement]
### What is the Jira issue?
* [ZEPPELIN-3447](https://issues.apache.org/jira/projects/ZEPPELIN/issues/ZEPPELIN-3447)
### Questions:
* Does the licenses files need an update? N?A
* Is there breaking changes for older versions? N?A
* Does this needs documentation? N?A
You can merge this pull request into a Git repository by running:
$ git pull https://github.com/prabhjyotsingh/zeppelin ZEPPELIN-3447
Alternatively you can review and apply these changes as the patch at:
https://github.com/apache/zeppelin/pull/2962.patch
To close this pull request, make a commit to your master/trunk branch
with (at least) the following in the commit message:
This closes #2962
----
commit a9b95c703292099400899b4ba0622556647611c9
Author: Prabhjyot Singh <pr...@...>
Date: 2018-05-08T08:48:35Z
ZEPPELIN-3447: Bump up version of jackson-databind
Change-Id: Ic7eec5108d879f07679507ca51a04a36711586dd
----
---
[GitHub] zeppelin issue #2962: [ZEPPELIN-3447] Bump up version of jackson-databind
Posted by prabhjyotsingh <gi...@git.apache.org>.
Github user prabhjyotsingh commented on the issue:
https://github.com/apache/zeppelin/pull/2962
Yes, nothing critical, but there have been a lot of fixes in jackson-databind and some of those are security patches as well. I have tested manually none those apply to Zeppelin (for now), but upgrading these libraries will make up future secure from accidental usage.
---
[GitHub] zeppelin issue #2962: [ZEPPELIN-3447] Bump up version of jackson-databind
Posted by prabhjyotsingh <gi...@git.apache.org>.
Github user prabhjyotsingh commented on the issue:
https://github.com/apache/zeppelin/pull/2962
Merging this if no more discussion.
---
[GitHub] zeppelin issue #2962: [ZEPPELIN-3447] Bump up version of jackson-databind
Posted by jongyoul <gi...@git.apache.org>.
Github user jongyoul commented on the issue:
https://github.com/apache/zeppelin/pull/2962
Not critical, but is there any special reason?
---
[GitHub] zeppelin pull request #2962: [ZEPPELIN-3447] Bump up version of jackson-data...
Posted by asfgit <gi...@git.apache.org>.
Github user asfgit closed the pull request at:
https://github.com/apache/zeppelin/pull/2962
---