From b27865c4ba81b8ae49ba496976dea3a8bf74f1ba Mon Sep 17 00:00:00 2001 From: Ioanna Kokkini Date: Thu, 2 Jul 2026 15:52:51 +0100 Subject: [PATCH] Pin jackson-databind Co-authored-by: Jamie B <53781962+JamieB-gu@users.noreply.github.com> --- project/Dependencies.scala | 4 +++- project/plugins.sbt | 2 ++ 2 files changed, 5 insertions(+), 1 deletion(-) diff --git a/project/Dependencies.scala b/project/Dependencies.scala index 338440d..1e899b3 100644 --- a/project/Dependencies.scala +++ b/project/Dependencies.scala @@ -22,7 +22,7 @@ object Dependencies { val playWS = groupId %% "play-ws" % exactPlayVersion val playTest = groupId %% "play-test" % exactPlayVersion % Test - Seq(play, playWS, playTest, jackson) + Seq(play, playWS, playTest, jackson, jacksonDatabind) } } @@ -48,4 +48,6 @@ object Dependencies { // Play 3.0 is stuck on Jackson 2.14, which has 'high' vulnerabilities val jackson = "com.fasterxml.jackson.core" % "jackson-core" % "2.22.0" + val jacksonDatabind = "com.fasterxml.jackson.core" % "jackson-databind" % "2.22.0" + } diff --git a/project/plugins.sbt b/project/plugins.sbt index 3b5b0de..d36252f 100644 --- a/project/plugins.sbt +++ b/project/plugins.sbt @@ -1,3 +1,5 @@ addSbtPlugin("com.github.sbt" % "sbt-release" % "1.5.0") addSbtPlugin("ch.epfl.scala" % "sbt-version-policy" % "3.2.1") + +addDependencyTreePlugin \ No newline at end of file