diff --git a/.github/workflows/cifuzz.yml b/.github/workflows/cifuzz.yml index fd0e53ff98..3f6893d634 100644 --- a/.github/workflows/cifuzz.yml +++ b/.github/workflows/cifuzz.yml @@ -27,7 +27,7 @@ jobs: dry-run: false language: jvm - name: Upload Crash - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 if: failure() && steps.build.outcome == 'success' with: name: artifacts diff --git a/.github/workflows/main.yml b/.github/workflows/main.yml index 14b0e516cc..32760e48ba 100644 --- a/.github/workflows/main.yml +++ b/.github/workflows/main.yml @@ -4,7 +4,7 @@ on: branches: - master - "3.0" - - "2.16" + - "2.17" paths-ignore: - "README.md" - "release-notes/*" @@ -12,7 +12,7 @@ on: branches: - master - "3.0" - - "2.16" + - "2.17" paths-ignore: - "README.md" - "release-notes/*" @@ -32,7 +32,7 @@ jobs: steps: - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Set up JDK - uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0 + uses: actions/setup-java@9704b39bf258b59bc04b50fa2dd55e9ed76b47a8 # v4.1.0 with: distribution: 'temurin' java-version: ${{ matrix.java_version }} @@ -63,7 +63,7 @@ jobs: run: ./mvnw -B -q -ff -ntp test - name: Publish code coverage if: github.event_name != 'pull_request' && matrix.java_version == '8' - uses: codecov/codecov-action@eaaf4bedf32dbdc6b720b63067d99c4d77d6047d # v3.1.4 + uses: codecov/codecov-action@54bcd8715eee62d40e33596ef5e8f0f48dbbccab # v4.1.0 with: token: ${{ secrets.CODECOV_TOKEN }} file: ./target/site/jacoco/jacoco.xml diff --git a/.github/workflows/release.yml b/.github/workflows/release.yml index 8985c50222..723e56a357 100644 --- a/.github/workflows/release.yml +++ b/.github/workflows/release.yml @@ -30,7 +30,7 @@ jobs: [[ "$TAG" =~ jackson-core-[0-9]+\.[0-9]+\.[0-9]+(-rc[0-9]+)? ]] || exit 1 - uses: actions/checkout@b4ffde65f46336ab88eb53be808477a3936bae11 # v4.1.1 - name: Set up JDK - uses: actions/setup-java@0ab4596768b603586c0de567f2430c30f5b0d2b0 # v3.13.0 + uses: actions/setup-java@9704b39bf258b59bc04b50fa2dd55e9ed76b47a8 # v4.1.0 with: distribution: "temurin" java-version: "8" diff --git a/.github/workflows/scorecard.yml b/.github/workflows/scorecard.yml index b3e9d05ff3..0b7ace182a 100644 --- a/.github/workflows/scorecard.yml +++ b/.github/workflows/scorecard.yml @@ -52,7 +52,7 @@ jobs: # Upload the results as artifacts (optional). Commenting out will disable uploads of run results in SARIF # format to the repository Actions tab. - name: "Upload artifact" - uses: actions/upload-artifact@a8a3f3ad30e3422c9c7b888a15615d19a852ae32 # v3.1.3 + uses: actions/upload-artifact@5d5d22a31266ced268874388b861e4b58bb5c2f3 # v4.3.1 with: name: SARIF file path: results.sarif @@ -60,6 +60,6 @@ jobs: # Upload the results to GitHub's code scanning dashboard. - name: "Upload to code-scanning" - uses: github/codeql-action/upload-sarif@74483a38d39275f33fcff5f35b679b5ca4a26a99 # v2.22.5 + uses: github/codeql-action/upload-sarif@8a470fddafa5cbb6266ee11b37ef4d8aae19c571 # v3.24.6 with: sarif_file: results.sarif diff --git a/README.md b/README.md index 1e23293b1d..a16f038064 100644 --- a/README.md +++ b/README.md @@ -28,7 +28,7 @@ Project contains versions 2.0 and above: source code for earlier (1.x) versions | Artifact | [![Maven Central](https://maven-badges.herokuapp.com/maven-central/com.fasterxml.jackson.core/jackson-core/badge.svg)](https://maven-badges.herokuapp.com/maven-central/com.fasterxml.jackson.core/jackson-core) | | OSS Sponsorship | [![Tidelift](https://tidelift.com/badges/package/maven/com.fasterxml.jackson.core:jackson-core)](https://tidelift.com/subscription/pkg/maven-com-fasterxml-jackson-core-jackson-core?utm_source=maven-com-fasterxml-jackson-core-jackson-core&utm_medium=referral&utm_campaign=readme) | | Javadocs | [![Javadoc](https://javadoc.io/badge/com.fasterxml.jackson.core/jackson-core.svg)](https://javadoc.io/doc/com.fasterxml.jackson.core/jackson-core) | -| Code coverage (2.15) | [![codecov.io](https://codecov.io/github/FasterXML/jackson-core/coverage.svg?branch=2.15)](https://codecov.io/github/FasterXML/jackson-core?branch=2.15) | +| Code coverage (2.16) | [![codecov.io](https://codecov.io/github/FasterXML/jackson-core/coverage.svg?branch=2.16)](https://codecov.io/github/FasterXML/jackson-core?branch=2.16) | | CodeQ (ClusterFuzz) | [![Fuzzing Status](https://oss-fuzz-build-logs.storage.googleapis.com/badges/jackson-core.svg)](https://bugs.chromium.org/p/oss-fuzz/issues/list?sort=-opened&can=1&q=proj:jackson-core) | | OpenSSF Score | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/FasterXML/jackson-core/badge)](https://securityscorecards.dev/viewer/?uri=github.com/FasterXML/jackson-core) | diff --git a/pom.xml b/pom.xml index dbe21dce77..47a3775d5f 100644 --- a/pom.xml +++ b/pom.xml @@ -8,12 +8,12 @@ com.fasterxml.jackson jackson-base - 2.16.2 + 2.17.0 com.fasterxml.jackson.core jackson-core Jackson-core - 2.16.2 + 2.17.0 jar Core Jackson processing abstractions (aka Streaming API), implementation for JSON @@ -30,7 +30,7 @@ scm:git:git@github.com:FasterXML/jackson-core.git scm:git:git@github.com:FasterXML/jackson-core.git https://github.com/FasterXML/jackson-core - jackson-core-2.16.2 + jackson-core-2.17.0 @@ -59,7 +59,7 @@ com.fasterxml.jackson.core.*;version=${project.version} ${project.groupId}.json - 2024-03-09T18:40:39Z + 2024-03-12T21:35:57Z