MCP-647 Bump Jackson 3 pin to 3.2.3 for open SCA CVEs

[damien-urruty-sonarsource]

Summary

• Bump the Gradle resolution pin for Jackson 3 (tools.jackson*) from 3.1.6 to 3.2.3 to remediate open SCA findings (CVE-2026-89407, CVE-2026-91776, CVE-2026-91777)
• Widen the pin to all tools.jackson* groups so jackson-dataformat-yaml and the BOM stay aligned
• Refresh main and IT Gradle lockfiles

[hashicorp-vault-sonar-prod]

MCP-647

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · The Jackson 3 upgrade changes dependency resolution across main and integration builds.

Bumps Jackson 3 pin to 3.1.7 and widens it to cover all tools.jackson* groups to remediate open SCA CVEs (CVE-2026-89407, CVE-2026-91776, CVE-2026-91777). Gradle lockfiles refreshed. No issues found.

Review coverage

🧪 Functional validation 1 of 1 objectives covered

📋 Rules No rules evaluated

🤖 Auto-approval Not enabled · Set up

Implementation Status ✅ 1 of 1 objectives covered

✅ MCP-647 - 1 of 1 objectives covered

This PR covers bumping the Jackson version pin to 3.2.3 to address open SCA CVEs.

✅ 1 covered here

• ✅ Bump Jackson 3 pin to 3.2.3 for open SCA CVEs

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Counting what did not apply, without listing it.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqubecloud]

Quality Gate passed

Issues
0 New issues
0 Accepted issues
0 New dependency risks

Measures
0 Security Hotspots
0.0% Coverage on New Code
0.0% Duplication on New Code

See analysis details on SonarQube Cloud