Upgrade fasterxml

[rakeshparuchuri]

No description provided.

[xiazcy]

Hi, thanks for opening the PR.

Could you clarify the reason for upgrading jackson-annotations, and why 2.15.0-rc1? We don't use release candidates, especially when there are newer official released versions.

Note that we are currently pinning jackson libraries to 2.13.x versions for compatibility reasons with Spark 2.3.3 (see comment on the pom file).

[rakeshparuchuri]

Hi, thanks for opening the PR.

Could you clarify the reason for upgrading jackson-annotations, and why 2.15.0-rc1? We don't use release candidates, especially when there are newer official released versions.

Note that we are currently pinning jackson libraries to 2.13.x versions for compatibility reasons with Spark 2.3.3 (see comment on the pom file).

thanks @xiazcy for the reply
I have upgraded the dependency since it was vulnerable to one of the High severity issue.

I was't aware that we cannot upgrade to release candidates. I am committing again by upgrading to official released version.

[kenhuuu]

Hi and thanks for contributing.

I was wondering what kind of testing you did for this PR. As noted earlier, it seems like this version was pinned for a reason. Have you looked into any potential issues with Spark/Scala if you change this Jackson version?

[kenhuuu]

It seems like progress on this PR has stalled and it isn't able to pass the smoke tests due to library version convergence issues. More work and testing will need to be done in order to move this through. Is anyone able to help with this? As this PR has been open for a while, if no one is able to help update it in the next week then I think we should close it for the time being until someone is able to work on it.