[GitHub] [nifi-registry] exceptionfactory commented on a change in pull request #318: NIFIREG-447 - Upgrade direct dependencies.

[GitBox <gi...@apache.org>]

exceptionfactory commented on a change in pull request #318:
URL: https://github.com/apache/nifi-registry/pull/318#discussion_r596029135



##########
File path: pom.xml
##########
@@ -92,11 +92,12 @@
         <project.reporting.outputEncoding>UTF-8</project.reporting.outputEncoding>
         <inceptionYear>2017</inceptionYear>
         <org.slf4j.version>1.7.30</org.slf4j.version>
-        <jetty.version>9.4.19.v20190610</jetty.version>
+        <jetty.version>9.4.38.v20210224</jetty.version>
         <jax.rs.api.version>2.1</jax.rs.api.version>
         <jersey.server.version>2.29.1</jersey.server.version>
         <jersey.client.version>2.28</jersey.client.version>
         <jackson.version>2.10.3</jackson.version>
+        <jackson-databind.version>2.9.10.8</jackson-databind.version>

Review comment:
       Is there a reason for not updating both `jackson-core` and `jackson-databind` to a more recent version?  Both libraries have version `2.12.2` available as of 2021-03-03.  At minimum, it seems like it would be best to keep the minor version the same between `jackson-core` and `jackson-databind` as opposed to having `2.10` for `jackson-core` and `2.9` for `jackson-databind`.




----------------------------------------------------------------
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.

For queries about this service, please contact Infrastructure at:
users@infra.apache.org