From 8187006c31f1ebdc80f4090a2e1f05c8bdc223f7 Mon Sep 17 00:00:00 2001
From: Lukasz Lenart <lukaszlenart@apache.org>
Date: Fri, 6 Sep 2019 10:15:12 +0200
Subject: [PATCH] WW-5038 Upgrades jackson-databind to version 2.9.9.3 plus
 upgrades jackson-core to 2.9.9

---
 pom.xml | 14 ++++++++++++--
 1 file changed, 12 insertions(+), 2 deletions(-)

diff --git a/pom.xml b/pom.xml
index b46d10646..60c81ff1f 100644
--- a/pom.xml
+++ b/pom.xml
@@ -104,7 +104,9 @@
         <tiles.version>3.0.8</tiles.version>
         <tiles-request.version>1.0.7</tiles-request.version>
         <log4j2.version>2.11.1</log4j2.version>
-        <jackson.version>2.9.8</jackson.version>
+        <jackson.version>2.9.9</jackson.version>
+        <!-- FIXME: drop once a new 2.9.10 will be out and all packages will be in sync -->
+        <jackson-databind.version>2.9.9.3</jackson-databind.version>
 
         <!-- Site generation -->
         <fluido-skin.version>1.7</fluido-skin.version>
@@ -1134,7 +1136,7 @@
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-databind</artifactId>
-                <version>${jackson.version}</version>
+                <version>${jackson-databind.version}</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson.dataformat</groupId>
@@ -1142,6 +1144,14 @@
                 <version>${jackson.version}</version>
             </dependency>
 
+            <!-- FIXME: Workaround for jackson-dataformat-xml issue #340 of forgetting to update stax2-api  -->
+            <!-- https://github.com/FasterXML/jackson-dataformat-xml/issues/340 -->
+            <dependency>
+                <groupId>org.codehaus.woodstox</groupId>
+                <artifactId>stax2-api</artifactId>
+                <version>4.1</version>
+            </dependency>
+
             <dependency>
                 <groupId>org.apache.juneau</groupId>
                 <artifactId>juneau-marshall</artifactId>