Jackson 2.12.2 patch released (~30 fixes!)

[Tatu Saloranta]

As per title, Jackson 2.12.2 patch version was just released.
Changes are listed here:

https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.12.2

and cover about half of all Jackson components. Upgrade from 2.12.1
and 2.12.0 is strongly recommended.

After this patch, the rate of releases for 2.12 is expected to slow
down significantly: focus will be on 2.13 and 3.0 (master)
development.

Of earlier branches, all up to and including 2.9 are closed: 2.10 will
likely be closed by the end of this month (March 2021) and no new
releases are expected.
2.11 branch is still open and could theoretically get one full
release, but since there are pending changes to include this also
seems unlikely.

-+ Tatu +-

[Tatu Saloranta]

Ok, some bad news: for some (still poorly understood) problem, there
were issues in 2.12.2 release of following modules:

* JAX-RS providers (all)
* JSR-353 (old JSON-P) datatype

These modules had been changed to produce both "regular" variants to
refer to older J2EE APIs, and matching "-jakarta" (maven classifier
"jakarta") variants for newer Jakarta 2.0 J2EE APIs
(if you are not familiar with this big FUBAR-style transition, read
f.ex https://blogs.oracle.com/javamagazine/transition-from-java-ee-to-jakarta-ee).

I am working with Sonatype admins to see if the problem might be in
Nexus repository's publishing, as well as Marc M who implemented
post-processing to create 2 jars, to see how to resolve the problem.
This may result in either fix for 2.12.2, or, possibly, release of
2.12.2.1 micro-patches for affected modules.

Also: for JSON-P module, specifically, I decided to go different route
so that there are TWO distinct artifacts:

* `jackson-datatype-jsr353`: old `javax.json` JSONP API type supporting module
* `jackson-datatype-jakarta-jsonp`: new `jakarata.json` JSONP APP API
type supporting module

which does not use classifier solution. For Jackson 3.0 we may want to
go with only supporting Jakarta variants, but that is
still to be Discussed and Decided.

-+ Tatu +-

[Mark Derricutt]

Muchly appreciate all your hard work here Tatu!

I wonder if using Pomchecker from Andres might be helpful - altho it sounds like the problems extend more than just the poms.

https://andresalmiray.com/pomchecker–1–1–0-has-been-released/

Mark

[Tatu Saloranta]

On Thu, Mar 4, 2021 at 6:08 PM Mark Derricutt <ma...@talios.com> wrote:
>
> Muchly appreciate all your hard work here Tatu!
>
> I wonder if using Pomchecker from Andres might be helpful - altho it sounds like the problems extend more than just the poms.
>
> https://andresalmiray.com/pomchecker–1–1–0-has-been-released/

Thanks for the link, I can have a look. It may or may not help for
this specific problem, but sounds useful in general, worth checking
out.

-+ Tatu +-

>
> Mark
>
>
>
>
> From: Tatu Saloranta <ta...@fasterxml.com>
> Reply: jackso...@googlegroups.com <jackso...@googlegroups.com>
> Date: 5 March 2021 at 2:23:28 PM
> To: jackson-announce <jackson-...@googlegroups.com>, jackson-user <jackso...@googlegroups.com>, jacks...@googlegroups.com <jacks...@googlegroups.com>
> Subject: [jackson-user] Re: Jackson 2.12.2 patch released (~30 fixes!)
>
> Ok, some bad news: for some (still poorly understood) problem, there were issues in 2.12.2 release of following modules:
>

> --
> You received this message because you are subscribed to the Google Groups "jackson-user" group.
> To unsubscribe from this group and stop receiving emails from it, send an email to jackson-user...@googlegroups.com.
> To view this discussion on the web visit https://groups.google.com/d/msgid/jackson-user/CALYGm1x-37Rd69C-9TBK4t2vu4qR8DwM%2BbFD3Zca%3D8hfdX6eLQ%40mail.gmail.com.

[Tamás Cservenák]

Howdy,

any news about POM whereabouts? Or the 2.12.2.1 w/ POMs?

Thanks

Tamas

To view this discussion on the web visit https://groups.google.com/d/msgid/jackson-user/CAL4a10iASsAe%2By1aRUf8ChVvYebdbV01rnu5h0Z_ixLRLh7XJQ%40mail.gmail.com.

[Tatu Saloranta]

On Mon, Mar 8, 2021 at 8:19 AM Tamás Cservenák <ta...@cservenak.net> wrote:
>
> Howdy,
>
> any news about POM whereabouts? Or the 2.12.2.1 w/ POMs?

Unfortunately, no, given that this does not seem like a transient
problem but systemic with the release with latest pom.xml of
jaxrs-providers.
Because of this, it is not possible to release a functioning 2.12.2.1 either.

Issue on Jackson side is:

https://github.com/FasterXML/jackson-jaxrs-providers/issues/138

and Sonatype side:

https://issues.sonatype.org/browse/MVNCENTRAL-6595

I am hoping to hear more about the second one today or tomorrow. It
may be necessary to just revert changes to poms,
but that would mean that the jakarta variant will not have functioning
OSGi metadata.
That is no worse than 2.12.1 or earlier, but not optimal.

-+ Tatu +-

> To view this discussion on the web visit https://groups.google.com/d/msgid/jackson-user/CAPLpRQJvzaz7etm%3DYk40Fc_O29aUWpTUnieRhYGJykNC1M__vQ%40mail.gmail.com.

[Tatu Saloranta]

UPDATE: now all Jackson 2.12.2 artifacts should be complete and
functional again. I had to revert some release changes wrt JAX-RS
components, re-run release and get Sonatype OSS Nexus Admins help
replace the dysfunctional artifacts, and that is now complete.

This also means that an attempted fix to OSGi/Jakarta compatibility --
that is, ability to use new "Jakarta" replacements of "javax" API jars
on OSGi container systems -- had to be reverted, and we need something
else to address this problem.

-+ Tatu +-