Skip to content

Resolve security vulnerabilities in Jackson and Central publishing plugin dependencies #458

New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Merged
frankgiordano merged 8 commits into from
Mar 30, 2026
Merged

Resolve security vulnerabilities in Jackson and Central publishing plugin dependencies #458

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
8 commits
Select commit Hold shift + click to select a range
c723119
Update Unirest dependency to use Jackson legacy module
frankgiordano Mar 30, 2026
6d8805a
Bump version from 6.1.1 to 6.1.2
frankgiordano Mar 30, 2026
578878a
Update zowe-client-java-sdk version to 6.1.2
frankgiordano Mar 30, 2026
d8f2b3d
Update dependencies and plugin versions in pom.xml
frankgiordano Mar 30, 2026
19830dd
clean up
frankgiordano Mar 30, 2026
f6eee7a
Enhance exception message assertions in TsoStartTest
frankgiordano Mar 30, 2026
5f44e34
Enhance error message for TSO start response parsing
frankgiordano Mar 30, 2026
92cae7e
Merge branch 'main' into unirest-jackson
frankgiordano Mar 30, 2026
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
8 changes: 4 additions & 4 deletions README.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -249,27 +249,27 @@ Thin JAR (recommended):
<dependency>
<groupId>org.zowe.client.java.sdk</groupId>
<artifactId>zowe-client-java-sdk</artifactId>
<version>6.1.1</version>
<version>6.1.2</version>
</dependency>

Fat JAR (with dependencies):

<dependency>
<groupId>org.zowe.client.java.sdk</groupId>
<artifactId>zowe-client-java-sdk</artifactId>
<version>6.1.1</version>
<version>6.1.2</version>
<classifier>jar-with-dependencies</classifier>
</dependency>

For a Gradle project add the SDK as a dependency by updating your `build.gradle` as follows:

Thin JAR (recommended):

implementation group: 'org.zowe.client.java.sdk', name: 'zowe-client-java-sdk', version: '6.1.1'
implementation group: 'org.zowe.client.java.sdk', name: 'zowe-client-java-sdk', version: '6.1.2'

Fat JAR (with dependencies):

implementation group: 'org.zowe.client.java.sdk', name: 'zowe-client-java-sdk', version: '6.1.1', classifier: 'jar-with-dependencies'
implementation group: 'org.zowe.client.java.sdk', name: 'zowe-client-java-sdk', version: '6.1.2', classifier: 'jar-with-dependencies'

## Publishing to Maven Central

Expand Down
28 changes: 19 additions & 9 deletions pom.xml
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -6,7 +6,7 @@

<groupId>org.zowe.client.java.sdk</groupId>
<artifactId>zowe-client-java-sdk</artifactId>
<version>6.1.1</version>
<version>6.1.2</version>

<packaging>jar</packaging>
<name>${project.groupId}:${project.artifactId}</name>
Expand Down Expand Up @@ -90,14 +90,8 @@
</dependency>
<dependency>
<groupId>com.konghq</groupId>
<artifactId>unirest-objectmapper-jackson</artifactId>
<version>4.2.4</version>
</dependency>
<dependency>
<groupId>org.sonatype.central</groupId>
<artifactId>central-publishing-maven-plugin</artifactId>
<version>0.8.0</version>
<scope>provided</scope>
<artifactId>unirest-modules-jackson-legacy</artifactId>
<version>4.8.1</version>
</dependency>

<!-- Test -->
Expand Down Expand Up @@ -222,6 +216,22 @@
</execution>
</executions>
</plugin>
<plugin>
<groupId>org.sonatype.central</groupId>
<artifactId>central-publishing-maven-plugin</artifactId>
<version>0.10.0</version>
<extensions>true</extensions>
<configuration>
<publishingServerId>central</publishingServerId>
</configuration>
<dependencies>
<dependency>
<groupId>org.codehaus.plexus</groupId>
<artifactId>plexus-utils</artifactId>
<version>4.0.3</version>
</dependency>
</dependencies>
</plugin>
</plugins>
</build>

Expand Down
1 change: 0 additions & 1 deletion src/test/java/zowe/client/sdk/zostso/methods/TsoStartTest.java
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -103,7 +103,6 @@ public void tstTsoStartInvalidJsonThrowsZosmfRequestExceptionWithCorrectMessageF
assertTrue(ex.getMessage().contains("Unrecognized token")
|| ex.getMessage().toLowerCase().contains("json")
);

}
}

Expand Down
Loading