DBZ-4955 Add comment about decoupled Jackson versions

This commit is contained in:
Chris Cranford 2022-04-05 07:55:21 -04:00 committed by Chris Cranford
parent a6d2c35d1f
commit 63c9f4a6c7

View File

@ -98,6 +98,7 @@
<version.kafka>3.1.0</version.kafka>
<version.zookeeper>3.6.3</version.zookeeper>
<!-- Kafka uses 2.12.3 but we need to bump due to CVE-2020-36518 before Kafka fixes it -->
<!-- NOTE: These two versions are maintained separately due to decoupling jackson and databind for downstream -->
<version.jackson>2.13.2</version.jackson>
<version.jackson.databind>2.13.2</version.jackson.databind>
<version.org.slf4j>1.7.30</version.org.slf4j>