[jira] [Updated] (FLINK-40617) Connectors/Kafka: Bump jackson-bom, log4j, avro, and other dependency versions

["Purushottam Sinha (Jira)" <ji...@apache.org>]

     [ https://issues.apache.org/jira/browse/FLINK-40617?page=com.atlassian.jira.plugin.system.issuetabpanels:all-tabpanel ]

Purushottam Sinha updated FLINK-40617:
--------------------------------------
    Component/s: Connectors / Kafka

> Connectors/Kafka: Bump jackson-bom, log4j, avro, and other dependency versions
> ------------------------------------------------------------------------------
>
>                 Key: FLINK-40617
>                 URL: https://issues.apache.org/jira/browse/FLINK-40617
>             Project: Flink
>          Issue Type: Improvement
>          Components: Connectors / Kafka
>            Reporter: Purushottam Sinha
>            Priority: Major
>
> Several third-party dependency versions pinned in the root pom.xml are behind current upstream releases. Bumping them keeps the connector aligned with Flink master pins and current Maven Central releases.
> - jackson-bom 2.21.3 -> 2.22.2 (compile-scope, ships in flink-connector-kafka.jar); matches Flink master pin.
> - log4j 2.25.4 -> 2.26.1 (test-scope); matches Flink master pin.
> - avro 1.12.0 -> 1.12.2 (test-scope); latest patch on the 1.12.x line.
> - Hygiene bumps with no known issues: commons-cli, commons-codec, commons-compress, commons-io, commons-lang3, javassist, objenesis, snakeyaml, snappy-java, archunit, docker-java-api, guava.
> See PR: https://github.com/apache/flink-connector-kafka/pull/306



--
This message was sent by Atlassian Jira
(v8.20.10#820010)