From ee21ed06e78e235a39dcdeddbf1a13dbc34cda8f Mon Sep 17 00:00:00 2001 From: box-sdk-build Date: Mon, 6 Jul 2026 10:22:07 -0700 Subject: [PATCH 1/2] chore: Update `.codegen.json` with commit hash of `codegen` and `openapi` spec [skip ci] --- .codegen.json | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/.codegen.json b/.codegen.json index c9ef58a30..9a2d88391 100644 --- a/.codegen.json +++ b/.codegen.json @@ -1 +1 @@ -{ "engineHash": "5560f9a", "specHash": "131c54a", "version": "10.14.0" } +{ "engineHash": "e6dafaf", "specHash": "131c54a", "version": "10.14.0" } From 255ef0684d6e9fde861b935602e5723ed1485088 Mon Sep 17 00:00:00 2001 From: box-sdk-build Date: Wed, 8 Jul 2026 05:51:25 -0700 Subject: [PATCH 2/2] chore: Bump Jackson libraries to fix CVEs in Java (box/box-codegen#971) --- .codegen.json | 2 +- README.md | 12 ++++++------ gradle.properties | 6 +++--- 3 files changed, 10 insertions(+), 10 deletions(-) diff --git a/.codegen.json b/.codegen.json index 9a2d88391..a36c96853 100644 --- a/.codegen.json +++ b/.codegen.json @@ -1 +1 @@ -{ "engineHash": "e6dafaf", "specHash": "131c54a", "version": "10.14.0" } +{ "engineHash": "7fa5d4a", "specHash": "131c54a", "version": "10.14.0" } diff --git a/README.md b/README.md index 5e4755822..af59071e9 100644 --- a/README.md +++ b/README.md @@ -173,14 +173,14 @@ See [CONTRIBUTING.md](./CONTRIBUTING.md). The Java SDK uses third-party libraries that are required for usage. Their licenses are listed below: -1. [jackson-annotations v2.17.2](https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-annotations/2.17.2) - Maven: `com.fasterxml.jackson.core:jackson-annotations:2.17.2` +1. [jackson-annotations v2.21](https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-annotations/2.21) + Maven: `com.fasterxml.jackson.core:jackson-annotations:2.21` Licence: [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0) -2. [jackson-core v2.17.2](https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-core/2.17.2) - Maven: `com.fasterxml.jackson.core:jackson-core:2.17.2` +2. [jackson-core v2.21.4](https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-core/2.21.4) + Maven: `com.fasterxml.jackson.core:jackson-core:2.21.4` Licence: [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0) -3. [jackson-databind v2.17.2](https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind/2.17.2) - Maven: `com.fasterxml.jackson.core:jackson-databind:2.17.2` +3. [jackson-databind v2.21.4](https://mvnrepository.com/artifact/com.fasterxml.jackson.core/jackson-databind/2.21.4) + Maven: `com.fasterxml.jackson.core:jackson-databind:2.21.4` Licence: [Apache 2.0](https://www.apache.org/licenses/LICENSE-2.0) 4. [okhttp v4.12.0](https://mvnrepository.com/artifact/com.squareup.okhttp3/okhttp/4.12.0) Maven: `com.squareup.okhttp3:okhttp:4.12.0` diff --git a/gradle.properties b/gradle.properties index 98e33de7e..ee0b8d385 100644 --- a/gradle.properties +++ b/gradle.properties @@ -1,8 +1,8 @@ libraryJavaVersion=1.8 spotlessVersion=6.2.0 -jacksonAnnotationVersion=2.17.2 -jacksonCoreVersion=2.17.2 -jacksonDatabindVersion=2.17.2 +jacksonAnnotationVersion=2.21 +jacksonCoreVersion=2.21.4 +jacksonDatabindVersion=2.21.4 okhttpVersion=4.12.0 okioVersion=3.5.0 jose4jVersion=0.9.6