From 9408e21f338eb30a0e673d752af4a8c26a31c21f Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Fri, 17 Jul 2026 14:38:18 +0000
Subject: [PATCH] Bump com.fasterxml.jackson.core:jackson-databind in /lib

Bumps [com.fasterxml.jackson.core:jackson-databind](https://github.com/FasterXML/jackson) from 2.21.1 to 2.21.5.
- [Commits](https://github.com/FasterXML/jackson/commits)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-databind
  dependency-version: 2.21.5
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 lib/pom.xml | 2 +-
 pom.xml     | 2 +-
 2 files changed, 2 insertions(+), 2 deletions(-)

diff --git a/lib/pom.xml b/lib/pom.xml
index 7b2a63e0559..feb8b012d94 100644
--- a/lib/pom.xml
+++ b/lib/pom.xml
@@ -68,7 +68,7 @@
         <jackcess.version>4.0.10</jackcess.version>
         <jackson-annotations.version>2.22</jackson-annotations.version>
         <!--check Beam BOM to find matching version https://repo1.maven.org/maven2/org/apache/beam/beam-runners-google-cloud-dataflow-java/xxx/beam-runners-google-cloud-dataflow-java-xxx.pom -->
-        <jackson.version>2.22.0</jackson.version>
+        <jackson.version>2.21.5</jackson.version>
         <jakarta-activation-api.version>2.1.4</jakarta-activation-api.version>
         <jakarta-annotation-api.version>3.0.0</jakarta-annotation-api.version>
         <jakarta-servlet-api.version>6.1.0</jakarta-servlet-api.version>
diff --git a/pom.xml b/pom.xml
index eb865cf2f0b..c577883f098 100644
--- a/pom.xml
+++ b/pom.xml
@@ -214,7 +214,7 @@
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>
                 <artifactId>jackson-databind</artifactId>
-                <version>2.21.1</version>
+                <version>2.21.5</version>
             </dependency>
             <dependency>
                 <groupId>com.fasterxml.jackson.core</groupId>