deps(deps): bump com.fasterxml.jackson:jackson-bom from 2.22.2 to 2.22.3 in the jackson group across 1 directory

[dependabot]

Bumps the jackson group with 1 update in the / directory: com.fasterxml.jackson:jackson-bom.

Updates com.fasterxml.jackson:jackson-bom from 2.22.2 to 2.22.3

Commits

• 9b1c380 [maven-release-plugin] prepare release jackson-bom-2.22.3
• f76ca14 Prep for 2.22.3 release
• d6ac108 Merge branch '2.21' into 2.22
• 093a05e Post-release dep version bump
• e7a71a2 [maven-release-plugin] prepare for next development iteration
• 62d4d51 [maven-release-plugin] prepare release jackson-bom-2.21.7
• 6171b54 Prep for 2.21.7 release
• 6702bf3 Merge branch '2.20' into 2.21
• 2feb1f9 Merge branch '2.19' into 2.20
• 1129aa0 Merge branch '2.18' into 2.19
• Additional commits viewable in compare view

[github-actions]

Dependency Review

✅ No vulnerabilities or license issues or OpenSSF Scorecard issues found.

OpenSSF Scorecard

Package	Version	Score	Details
maven/com.fasterxml.jackson:jackson-bom	2.22.3	Unknown	Unknown
maven/org.mockito:mockito-core	5.24.0	🟢 7.3	Details Check Score Reason Code-Review 🟢 10 all changesets reviewed Security-Policy 🟢 9 security policy file detected Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Maintained 🟢 10 10 commit(s) and 8 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing ⚠️ 0 project is not fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md Binary-Artifacts 🟢 9 binaries present in source code Packaging 🟢 10 packaging workflow detected SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/org.slf4j:slf4j-api	2.0.20	🟢 5.8	Details Check Score Reason Dangerous-Workflow 🟢 10 no dangerous workflow patterns detected Code-Review ⚠️ 0 Found 1/30 approved changesets -- score normalized to 0 Token-Permissions 🟢 10 GitHub workflow tokens follow principle of least privilege Security-Policy 🟢 10 security policy file detected Packaging ⚠️ -1 packaging workflow not detected Maintained 🟢 10 29 commit(s) and 3 issue activity found in the last 90 days -- score normalized to 10 Binary-Artifacts ⚠️ 0 binaries present in source code Pinned-Dependencies ⚠️ 0 dependency not pinned by hash detected -- score normalized to 0 CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing 🟢 10 project is fuzzed License 🟢 10 license file detected Signed-Releases ⚠️ -1 no releases found Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0
maven/org.xmlunit:xmlunit-core	2.14.0	🟢 7.2	Details Check Score Reason Dangerous-Workflow ⚠️ -1 no workflows found Maintained 🟢 10 18 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions ⚠️ -1 No tokens found Security-Policy 🟢 10 security policy file detected Packaging ⚠️ -1 packaging workflow not detected Code-Review 🟢 3 Found 4/11 approved changesets -- score normalized to 3 Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ -1 no dependencies found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing 🟢 10 project is fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Signed-Releases 🟢 8 5 out of the last 5 releases have a total of 5 signed artifacts.
maven/org.xmlunit:xmlunit-matchers	2.14.0	🟢 7.2	Details Check Score Reason Dangerous-Workflow ⚠️ -1 no workflows found Maintained 🟢 10 18 commit(s) and 2 issue activity found in the last 90 days -- score normalized to 10 Token-Permissions ⚠️ -1 No tokens found Security-Policy 🟢 10 security policy file detected Packaging ⚠️ -1 packaging workflow not detected Code-Review 🟢 3 Found 4/11 approved changesets -- score normalized to 3 Binary-Artifacts 🟢 10 no binaries found in the repo Pinned-Dependencies ⚠️ -1 no dependencies found CII-Best-Practices ⚠️ 0 no effort to earn an OpenSSF best practices badge detected Fuzzing 🟢 10 project is fuzzed License 🟢 10 license file detected Branch-Protection ⚠️ -1 internal error: error during branchesHandler.setup: internal error: some github tokens can't read classic branch protection rules: https://github.com/ossf/scorecard-action/blob/main/docs/authentication/fine-grained-auth-token.md SAST ⚠️ 0 SAST tool is not run on all commits -- score normalized to 0 Signed-Releases 🟢 8 5 out of the last 5 releases have a total of 5 signed artifacts.

Scanned Files

• pom.xml

[github-actions]

📋 Unreleased Changelog Preview

This is what the next release notes will look like based on commits in this PR.

Changelog

All notable changes to this project will be documented in this file.

[Unreleased]

⬆️ Dependency Updates

• Bump the maven-plugins group with 4 updates (deps-dev) — @dependabot[bot]

• Bump the kafka group with 3 updates (deps) — @dependabot[bot]

• Bump the cucumber group across 1 directory with 4 updates (deps) — @dependabot[bot]

• Bump org.mockito:mockito-core in the mockito group (deps-dev) — @dependabot[bot]

• Bump org.slf4j:slf4j-api in the logging group (deps) — @dependabot[bot]

• Bump xmlunit.version from 2.13.0 to 2.14.0 (deps) — @dependabot[bot]

• Bump com.fasterxml.jackson:jackson-bom (deps)

---

Generated by git-cliff

---

🔄 Run #61 · Wed, 30 Sep 2026 18:58:17 GMT

[nil-malh]

@dependabot rebase