Skip to content

Commit 95c4742

Browse files
AaronAtDuoclaude
andcommitted
Remove redundant jackson-core override from example app
The direct jackson-core:2.16.0 dependency was creating a version mismatch with jackson-databind:2.13.5 (managed by the Spring Boot 2.6.15 BOM via Retrofit's converter-jackson). This pin has been present since the initial commit and was never intentional — it just drifted as Spring Boot was updated independently. Removing it lets Spring Boot's BOM manage all jackson artifacts consistently. A follow-up Spring Boot 3.x upgrade will address the remaining Dependabot alerts including the jackson-core async parser DoS vulnerability. Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>
1 parent 63460db commit 95c4742

1 file changed

Lines changed: 0 additions & 6 deletions

File tree

duo-example/pom.xml

Lines changed: 0 additions & 6 deletions
Original file line numberDiff line numberDiff line change
@@ -74,12 +74,6 @@
7474
<version>4.6.1</version>
7575
<scope>provided</scope>
7676
</dependency>
77-
78-
<dependency>
79-
<groupId>com.fasterxml.jackson.core</groupId>
80-
<artifactId>jackson-core</artifactId>
81-
<version>2.16.0</version>
82-
</dependency>
8377
</dependencies>
8478

8579
<build>

0 commit comments

Comments
 (0)