[daniel-teuchert-sonarsource]

---

Summary by Gitar

• Dependencies:
  • Updated jackson version to 2.22.2 in libs.versions.toml

_{This will update automatically on new commits.}

[hashicorp-vault-sonar-prod]

CLOUDSEC-104

[gitar-bot]

Code Review ✅ Approved 1 resolved / 1 findings

Updates jackson dependency to version 2.22.2 in libs.versions.toml. No issues found.

✅ 1 resolved

✅ Quality: PR/commit title says 2.22.1 but the bump is to 2.22.2

📄 gradle/libs.versions.toml:6
The PR title and commit message (ec9a57a) both say "Update jackson databind to version 2.22.1", yet the pre-change value in gradle/libs.versions.toml was already jackson = "2.22.1" and the diff sets it to "2.22.2". Anyone auditing release notes or bisecting via commit messages will look for the wrong version; retitle the commit/PR to "Update jackson to version 2.22.2" (the version ref drives com.fasterxml.jackson:jackson-bom, not just jackson-databind). The version itself is valid — 2.22.2 of jackson-bom/jackson-databind exists on Maven Central — and no other file in the repo pins a jackson version, so the bump is otherwise complete.

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Showing less information.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqube-next]

Quality Gate passed for 'cloud-native-gradle-modules'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
No data about Duplication

See analysis details on SonarQube

[teemu-rytilahti-sonarsource]

LGTM, fixes CVE-2026-83557 which unblocks our QGs, thanks @daniel-teuchert-sonarsource! 🎉