tree 50fcde0a2c8ffaf6b6d7c6514350cdcbc9720353
parent 712f2a5d000c1362ddce4748842d190d55b826df
author Xavier Léauté <xvrl@apache.org> 1623893850 -0700
committer GitHub <noreply@github.com> 1623893850 -0700
gpgsig -----BEGIN PGP SIGNATURE-----
 
 wsBcBAABCAAQBQJgyqdaCRBK7hj4Ov3rIwAA70sIAHNKblkbMfF1DqRaCzgjK/HL
 kZwiUFuB8jD5n9HT1VFGnSYojkOnriIBkv6yNm8mdQyel8h+gtUL6lLbu+RGdybc
 uvoXjGVMvudvbUF5918A2blBr8dG6CIOoKG3Ecx5V1KwA6RlLeXXZOzSCiRmmVMl
 a8zNWQefXZvfq/mOSe35nveUiEqGUm93ZMtyTvYw19iLOdRoDWyTYrtm3jcWd1KT
 jgR38W2RXob1cDhJscrIl3HbeHldTWahG8h1GgXoaM5SZpFjHzf9FNyRq2/RRuOd
 mMIkh7Lh/zjDbWLKZbX5AzI7UCHZnNt4DXW402qH+erPp5KQ0KE1PjyTaJx89lI=
 =efzv
 -----END PGP SIGNATURE-----
 

update jackson dependencies to use bom (#11353)

Switching to the bom dependency declaration simplifies managing jackson
dependencies. It also removes the need to override individual library
versions for CVE fixes, since the bom takes care of that internally.

This change aligns our jackson dependency versions on 2.10.5(.x):
- updates jackson libraries from 2.10.2 to 2.10.5
- jackson-databind remains at 2.10.5.1 as defined in the bom

Release notes: https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.10