chore: bump com.amazonaws:aws-lambda-java-serialization from 1.3.1 to 1.4.1 - #2601
Conversation
Bumps [com.amazonaws:aws-lambda-java-serialization](https://github.com/aws/aws-lambda-java-libs) from 1.3.1 to 1.4.1. - [Commits](https://github.com/aws/aws-lambda-java-libs/commits) --- updated-dependencies: - dependency-name: com.amazonaws:aws-lambda-java-serialization dependency-version: 1.4.1 dependency-type: direct:production update-type: version-update:semver-minor ... Signed-off-by: dependabot[bot] <support@github.com>
dependabot
Bot
added
dependencies
|
phipag
left a comment
phipag
left a comment
There was a problem hiding this comment.
Reviewed and approved by @phipag. Minor bump of aws-lambda-java-serialization to 1.4.1. The public API surface is byte-for-byte identical between 1.3.1 and 1.4.1, and the classes this repo imports are unchanged. The internal Jackson upgrade from 2.15.4 to 2.18.6 is fully shaded under com.amazonaws.lambda.thirdparty with zero unshaded fasterxml classes, so it cannot conflict with the Jackson 2.22.1 used by Powertools. Java 11 compatibility is confirmed: the published bytecode is class-file major version 52, and java-build on 11 passes. The root pom bump also covers the two modules that inherit the version from dependencyManagement. All CI checks pass.
|
Tick the box to add this pull request to the merge queue (same as
|
1 participant
Bumps com.amazonaws:aws-lambda-java-serialization from 1.3.1 to 1.4.1.
Commits
Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting
@dependabot rebase.Dependabot commands and options
You can trigger Dependabot actions by commenting on this PR:
@dependabot rebasewill rebase this PR@dependabot recreatewill recreate this PR, overwriting any edits that have been made to it@dependabot show <dependency name> ignore conditionswill show all of the ignore conditions of the specified dependency@dependabot ignore this major versionwill close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this minor versionwill close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)@dependabot ignore this dependencywill close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)