Commit 95c4742
Remove redundant jackson-core override from example app
The direct jackson-core:2.16.0 dependency was creating a version mismatch
with jackson-databind:2.13.5 (managed by the Spring Boot 2.6.15 BOM via
Retrofit's converter-jackson). This pin has been present since the initial
commit and was never intentional — it just drifted as Spring Boot was
updated independently.
Removing it lets Spring Boot's BOM manage all jackson artifacts
consistently. A follow-up Spring Boot 3.x upgrade will address the
remaining Dependabot alerts including the jackson-core async parser DoS
vulnerability.
Co-Authored-By: Claude Opus 4.6 <noreply@anthropic.com>1 parent 63460db commit 95c4742
1 file changed
Lines changed: 0 additions & 6 deletions
| Original file line number | Diff line number | Diff line change | |
|---|---|---|---|
| |||
74 | 74 | | |
75 | 75 | | |
76 | 76 | | |
77 | | - | |
78 | | - | |
79 | | - | |
80 | | - | |
81 | | - | |
82 | | - | |
83 | 77 | | |
84 | 78 | | |
85 | 79 | | |
| |||
0 commit comments