diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml
index fd0e53ff98..3f6893d634 100644
--- a/.github/workflows/cifuzz.yml
+++ b/.github/workflows/cifuzz.yml
@@ -27,7 +27,7 @@ jobs:
dry-run: false
language: jvm
- name: Upload Crash
- uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+ uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
if: failure() && steps.build.outcome == 'success'
with:
name: artifacts
diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml
index 14b0e516cc..32760e48ba 100644
--- a/.github/workflows/main.yml
+++ b/.github/workflows/main.yml
@@ -4,7 +4,7 @@ on:
branches:
- master
- "3.0"
- - "2.16"
+ - "2.17"
paths-ignore:
- "README.md"
- "release-notes/*"
@@ -12,7 +12,7 @@ on:
branches:
- master
- "3.0"
- - "2.16"
+ - "2.17"
paths-ignore:
- "README.md"
- "release-notes/*"
@@ -32,7 +32,7 @@ jobs:
steps:
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Set up JDK
- uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
+ uses: actions/setup-java@9704b39bf258b59bc04b50fa2dd55e9ed76b47a8 # v4.1.0
with:
distribution: 'temurin'
java-version: ${{ matrix.java_version }}
@@ -63,7 +63,7 @@ jobs:
run: ./mvnw -B -q -ff -ntp test
- name: Publish code coverage
if: github.event_name != 'pull_request' && matrix.java_version == '8'
- uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4
+ uses: codecov/codecov-action@54bcd8715eee62d40e33596ef5e8f0f48dbbccab # v4.1.0
with:
token: ${{ secrets.CODECOV_TOKEN }}
file: ./target/site/jacoco/jacoco.xml
diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml
index 8985c50222..723e56a357 100644
--- a/.github/workflows/release.yml
+++ b/.github/workflows/release.yml
@@ -30,7 +30,7 @@ jobs:
[[ "$TAG" =~ jackson-core-[0-9]+\.[0-9]+\.[0-9]+(-rc[0-9]+)? ]] || exit 1
- uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1
- name: Set up JDK
- uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0
+ uses: actions/setup-java@9704b39bf258b59bc04b50fa2dd55e9ed76b47a8 # v4.1.0
with:
distribution: "temurin"
java-version: "8"
diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml
index b3e9d05ff3..0b7ace182a 100644
--- a/.github/workflows/scorecard.yml
+++ b/.github/workflows/scorecard.yml
@@ -52,7 +52,7 @@ jobs:
# Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF
# format to the repository Actions tab.
- name: "Upload artifact"
- uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3
+ uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1
with:
name: SARIF file
path: results.sarif
@@ -60,6 +60,6 @@ jobs:
# Upload the results to GitHub's code scanning dashboard.
- name: "Upload to code-scanning"
- uses: github/codeql-action/upload-sarif@74483a38d39275f33fcff5f35b679b5ca4a26a99 # v2.22.5
+ uses: github/codeql-action/upload-sarif@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 # v3.24.6
with:
sarif_file: results.sarif
diff --git a/README.md b/README.md
index 1e23293b1d..a16f038064 100644
--- a/README.md
+++ b/README.md
@@ -28,7 +28,7 @@ Project contains versions 2.0 and above: source code for earlier (1.x) versions
| Artifact | [![Maven Central](https://maven-badges.herokuapp.com/maven-central/com.fasterxml.jackson.core/jackson-core/badge.svg)](https://maven-badges.herokuapp.com/maven-central/com.fasterxml.jackson.core/jackson-core) |
| OSS Sponsorship | [![Tidelift](https://tidelift.com/badges/package/maven/com.fasterxml.jackson.core:jackson-core)](https://tidelift.com/subscription/pkg/maven-com-fasterxml-jackson-core-jackson-core?utm_source=maven-com-fasterxml-jackson-core-jackson-core&utm_medium=referral&utm_campaign=readme) |
| Javadocs | [![Javadoc](https://javadoc.io/badge/com.fasterxml.jackson.core/jackson-core.svg)](https://javadoc.io/doc/com.fasterxml.jackson.core/jackson-core) |
-| Code coverage (2.15) | [![codecov.io](https://codecov.io/github/FasterXML/jackson-core/coverage.svg?branch=2.15)](https://codecov.io/github/FasterXML/jackson-core?branch=2.15) |
+| Code coverage (2.16) | [![codecov.io](https://codecov.io/github/FasterXML/jackson-core/coverage.svg?branch=2.16)](https://codecov.io/github/FasterXML/jackson-core?branch=2.16) |
| CodeQ (ClusterFuzz) | [![Fuzzing Status](https://oss-fuzz-build-logs.storage.googleapis.com/badges/jackson-core.svg)](https://bugs.chromium.org/p/oss-fuzz/issues/list?sort=-opened&can=1&q=proj:jackson-core) |
| OpenSSF Score | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/FasterXML/jackson-core/badge)](https://securityscorecards.dev/viewer/?uri=github.com/FasterXML/jackson-core) |
diff --git a/pom.xml b/pom.xml
index dbe21dce77..47a3775d5f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -8,12 +8,12 @@
com.fasterxml.jackson
jackson-base
- 2.16.2
+ 2.17.0
com.fasterxml.jackson.core
jackson-core
Jackson-core
- 2.16.2
+ 2.17.0
jar
Core Jackson processing abstractions (aka Streaming API), implementation for JSON
@@ -30,7 +30,7 @@
scm:git:git@github.com:FasterXML/jackson-core.git
scm:git:git@github.com:FasterXML/jackson-core.git
https://github.com/FasterXML/jackson-core
- jackson-core-2.16.2
+ jackson-core-2.17.0
@@ -59,7 +59,7 @@ com.fasterxml.jackson.core.*;version=${project.version}
${project.groupId}.json
- 2024-03-09T18:40:39Z
+ 2024-03-12T21:35:57Z