question-mark
Stuck on an issue?

Lightrun Answers was designed to reduce the constant googling that comes with debugging 3rd party libraries. It collects links to all the places you might be looking at while hunting down a tough bug.

And, if you’re still stuck at the end, we’re happy to hop on a call to see how we can help out.

Gradle module metadata for 2.13.2.1 references non-existent jackson-bom 2.13.2.1

See original GitHub issue

Describe the bug See: https://repo1.maven.org/maven2/com/fasterxml/jackson/core/jackson-databind/2.13.2.1/jackson-databind-2.13.2.1.module

The Gradle module metadata for the 2.13.2.1 release contains:

{
  "group": "com.fasterxml.jackson",
  "module": "jackson-bom",
  "version": {
    "requires": "2.13.2.1"
  },
  "attributes": {
    "org.gradle.category": "platform"
  },
  "endorseStrictVersions": true
}

The jackson-bom version that should be resolved (via jackson-base) is 2.13.2.20220324. Everything is fine consuming jackson-databind from Maven, but from Gradle it is currently broken in 2.13.2.1 due to this wrong metadata which causes Gradle to try and fail to resolve jackson-bom:2.13.2.1 as seen in this error:

Could not find com.fasterxml.jackson:jackson-bom:2.13.2.1.

This can also be seen in this failed build scan.

Version information Which Jackson version(s) was this for? 2.13.2.1

To Reproduce If you have a way to reproduce this with:

Add a dependency on jackson-databind version 2.13.2.1 in a Gradle build and build the project. E.g.

dependencies {
    implementation 'com.fasterxml.jackson.core:jackson-databind:2.13.2.1'
}

Expected behavior If reproduction itself needs further explanation, you may also add more details here.

Additional context Add any other context about the problem here.

Issue Analytics

  • State:closed
  • Created a year ago
  • Reactions:24
  • Comments:35 (18 by maintainers)

github_iconTop GitHub Comments

16reactions
cowtowncodercommented, Mar 29, 2022

Just released jackson-databind:2.13.2.2 along with optional jackson-bom:2.13.2.20220328. This should have corrected GMM metadata, and be available from Maven Central soon (databind is there, bom on its way).

13reactions
cowtowncodercommented, Mar 28, 2022

I am hoping to get it done today. If not, tomorrow, and so forth. It all depends on my having time to do it that’s all. I wish my job was related to maintaining Jackson but this is not the case currently.

Read more comments on GitHub >

github_iconTop Results From Across the Web

Understanding Gradle Module Metadata - Gradle User Manual
Gradle Module Metadata is a format used to serialize the Gradle component model. It is similar to Apache Maven™'s POM file or Apache...
Read more >
jackson-databind vulerability fix - java - Stack Overflow
12.1, but when I update my gradle to refer to this latest library, I get another dependency error, which my gradle isn't able...
Read more >
History - Apache Calcite
Bump JDK from 15 to 17 in seed build cache CI jobs; [CALCITE-4798] Gradle build fails due to deprecated metadata APIs; Use jdk16...
Read more >
chore(deps): update all dependencies (major) (!151 ... - GitLab
gradle, 6.6-jdk11 -> 7.6-jdk11 · age · adoption · passing · confidence · husky (source), 4.2.5 -> 8.0.2 · age, adoption, passing, confidence....
Read more >
Open Source Used In AppDynamics_Cloud_Policy_Manage ...
In your requests please include the following reference number 78EE117C99-1336318007 ... 1.116 jackson-bom 2.13.2.1 ... 1.141 slf4j-api-module 1.7.32.
Read more >

github_iconTop Related Medium Post

No results found

github_iconTop Related StackOverflow Question

No results found

github_iconTroubleshoot Live Code

Lightrun enables developers to add logs, metrics and snapshots to live code - no restarts or redeploys required.
Start Free

github_iconTop Related Reddit Thread

No results found

github_iconTop Related Hackernoon Post

No results found

github_iconTop Related Tweet

No results found

github_iconTop Related Dev.to Post

No results found

github_iconTop Related Hashnode Post

No results found