Skip to content

chore(deps): bump json-schema-validator to 2.0.4, decline 3.x#121

Merged
amavashev merged 3 commits into
mainfrom
deps/json-schema-validator-2.0.4
Jul 22, 2026
Merged

chore(deps): bump json-schema-validator to 2.0.4, decline 3.x#121
amavashev merged 3 commits into
mainfrom
deps/json-schema-validator-2.0.4

Conversation

@amavashev

Copy link
Copy Markdown
Contributor

Summary

  • bump com.networknt:json-schema-validator 2.0.0 → 2.0.4 — the latest patch on the Jackson 2-compatible 2.x line
  • supersedes and documents the decision on chore(deps): bump com.networknt:json-schema-validator from 2.0.0 to 3.0.6 #118: the 3.x line targets Jackson 3 (tools.jackson.*) and cannot compile against this Spring Boot 3.5 / Jackson 2 service without carrying a second Jackson generation through the evidence validation path
  • the 3.x major has been dismissed via @dependabot ignore this major version; revisit when the service moves to a Jackson 3 framework baseline
  • CHANGELOG (Unreleased) and AUDIT.md record the rationale

Validation

  • mvn compile clean with 2.0.4 (no source changes needed — the 2.0.0 SchemaRegistry/Schema API surface is unchanged)
  • unit suite: 532/532 pass locally
  • Redis integration tests deferred to CI (no local Docker daemon)
  • artifact SHA1s verified against Maven Central

Adopt 2.0.4, the latest patch on the Jackson 2-compatible 2.x line. The
dependabot-proposed 3.0.6 major (#118) targets Jackson 3
(tools.jackson.*) and cannot compile against this Spring Boot 3.5 /
Jackson 2 service without carrying a second Jackson generation through
the evidence validation path; it was declined via dependabot
ignore-major until the framework baseline moves to Jackson 3.

No code changes required: the 2.0.0 SchemaRegistry/Schema API surface is
unchanged in 2.0.4. 532/532 unit tests pass.
@amavashev
amavashev enabled auto-merge July 22, 2026 11:43
@amavashev
amavashev merged commit 6a53ecc into main Jul 22, 2026
7 checks passed
@amavashev
amavashev deleted the deps/json-schema-validator-2.0.4 branch July 22, 2026 11:44
Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

None yet

Projects

None yet

Development

Successfully merging this pull request may close these issues.

1 participant