You are viewing a plain text version of this content. The canonical link for it is here.
Posted to issues@solr.apache.org by "solrbot (via GitHub)" <gi...@apache.org> on 2025/08/29 13:19:31 UTC
[PR] Update dependency com.fasterxml.jackson:jackson-bom to v2.19.2 (branch_9x) [solr]
solrbot opened a new pull request, #3536:
URL: https://github.com/apache/solr/pull/3536
This PR contains the following updates:
| Package | Type | Update | Change | Pending |
|---|---|---|---|---|
| [com.fasterxml.jackson:jackson-bom](https://redirect.github.com/FasterXML/jackson-bom) | dependencies | minor | `2.18.0` -> `2.19.2` | `2.20.0` |
---
### Configuration
📅 **Schedule**: Branch creation - Every minute ( * * * * * ) (UTC), Automerge - At any time (no schedule defined).
🚦 **Automerge**: Disabled by config. Please merge this manually once you are satisfied.
♻ **Rebasing**: Whenever PR becomes conflicted, or you tick the rebase/retry checkbox.
🔕 **Ignore**: Close this PR and you won't be reminded about this update again.
---
- [ ] <!-- rebase-check -->If you want to rebase/retry this PR, check this box
---
This PR has been generated by [Renovate Bot](https://redirect.github.com/solrbot/renovate-github-action)
<!--renovate-debug:eyJjcmVhdGVkSW5WZXIiOiI0MS44Mi4xMCIsInVwZGF0ZWRJblZlciI6IjQxLjgyLjEwIiwidGFyZ2V0QnJhbmNoIjoiYnJhbmNoXzl4IiwibGFiZWxzIjpbImV4ZW1wdC1zdGFsZSJdfQ==-->
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org
Re: [PR] Update dependency com.fasterxml.jackson:jackson-bom to v2.20.0 (branch_9x) [solr]
Posted by "solrbot (via GitHub)" <gi...@apache.org>.
solrbot commented on PR #3536:
URL: https://github.com/apache/solr/pull/3536#issuecomment-3318787422
### Renovate Ignore Notification
Because you closed this PR without merging, Renovate will ignore this update (`2.20.0`). You will get a PR once a newer version is released. To ignore this dependency forever, add it to the `ignoreDeps` array of your Renovate config.
If you accidentally closed this PR, or if you changed your mind: rename this PR to get a fresh replacement PR.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org
Re: [PR] Update dependency com.fasterxml.jackson:jackson-bom to v2.20.0 (branch_9x) [solr]
Posted by "janhoy (via GitHub)" <gi...@apache.org>.
janhoy commented on PR #3536:
URL: https://github.com/apache/solr/pull/3536#issuecomment-3319199761
I'm not aware of us using Jackson CBOR to serialize anything to disk, backup or ZK that would later need to be deserialized and could break. It's mainly use for request / response writer? Also our friend GPT believes that CBOR is future proof, so even if we persisted some data with an older version it would be readable with newer deserializer.
However, I'm ok with staying on current version unless it during the lifetime of 9.x becomes a security problem.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org
Re: [PR] Update dependency com.fasterxml.jackson:jackson-bom to v2.20.0 (branch_9x) [solr]
Posted by "malliaridis (via GitHub)" <gi...@apache.org>.
malliaridis commented on PR #3536:
URL: https://github.com/apache/solr/pull/3536#issuecomment-3287921343
Applied the same change as in main on the test that was failing due to the byte length mismatch.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org
Re: [PR] Update dependency com.fasterxml.jackson:jackson-bom to v2.20.0 (branch_9x) [solr]
Posted by "malliaridis (via GitHub)" <gi...@apache.org>.
malliaridis closed pull request #3536: Update dependency com.fasterxml.jackson:jackson-bom to v2.20.0 (branch_9x)
URL: https://github.com/apache/solr/pull/3536
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org
Re: [PR] Update dependency com.fasterxml.jackson:jackson-bom to v2.20.0 (branch_9x) [solr]
Posted by "malliaridis (via GitHub)" <gi...@apache.org>.
malliaridis commented on PR #3536:
URL: https://github.com/apache/solr/pull/3536#issuecomment-3319673319
I agree. I checked GPT as well, but I don't trust it much.
If someone can confirm that the changes are still compatible (I don't know how to do that), I would like to merge this update to 9x. In case of a security problem we will likely do so anyway. 🙂
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org
Re: [PR] Update dependency com.fasterxml.jackson:jackson-bom to v2.20.0 (branch_9x) [solr]
Posted by "malliaridis (via GitHub)" <gi...@apache.org>.
malliaridis commented on PR #3536:
URL: https://github.com/apache/solr/pull/3536#issuecomment-3318258213
Closing this as of potential breaking change due to the different serialization efficiency (see changes in tests).
If this backport is needed and the changes have been confirmed to not be breaking changes (for backwards compatibility) feel free to reopen this PR and merge the changes.
See also discussion in https://lists.apache.org/thread/h7rcscg4n8sqhxtsq4x5ly02qcvq6gz5
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org
Re: [PR] Update dependency com.fasterxml.jackson:jackson-bom to v2.20.0 (branch_9x) [solr]
Posted by "solrbot (via GitHub)" <gi...@apache.org>.
solrbot commented on PR #3536:
URL: https://github.com/apache/solr/pull/3536#issuecomment-3288301994
### Edited/Blocked Notification
Renovate will not automatically rebase this PR, because it does not recognize the last commit author and assumes somebody else may have edited the PR.
You can manually request rebase by checking the rebase/retry box above.
⚠️ **Warning**: custom changes will be lost.
--
This is an automated message from the Apache Git Service.
To respond to the message, please log on to GitHub and use the
URL above to go to the specific comment.
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For queries about this service, please contact Infrastructure at:
users@infra.apache.org
---------------------------------------------------------------------
To unsubscribe, e-mail: issues-unsubscribe@solr.apache.org
For additional commands, e-mail: issues-help@solr.apache.org