CLOUDSEC-115 Upgrade Jackson to 2.22.3 in shared Gradle modules

[karim-ouerghemmi-sonarsource]

Summary

• Upgrade the Jackson BOM from 2.22.2 to 2.22.3 to address GHSA-p6pp-m3f8-5c89.
• The JFrog Gradle plugin brings Jackson into the shared gradle-modules runtime classpath. The BOM now resolves its transitive jackson-core dependency to the patched version.

This addresses the remaining build-logic dependency path seen in SonarPHP. After this PR merges, SonarPHP still needs to advance its build-logic/common submodule pointer. The two SonarPHP integration-test paths are handled in SonarPHP PR #1818.

Validation

• ./gradlew :gradle-modules:dependencyInsight --configuration runtimeClasspath --dependency com.fasterxml.jackson.core:jackson-core --console=plain — resolves 2.22.3.
• ./gradlew :gradle-modules:check --console=plain — passed.

[hashicorp-vault-sonar-prod]

CLOUDSEC-115

[gitar-bot]

Code Review ✅ Approved

🟡 Medium risk · The shared Gradle runtime resolves Jackson to a patched dependency version.

Upgrades Jackson from 2.22.2 to 2.22.3 in shared Gradle modules to address security advisory GHSA-p6pp-m3f8-5c89. Validation confirms jackson-core resolves to the patched version and all checks pass. No issues found.

Review coverage

🧪 Functional validation No results

📋 Rules No rules evaluated

🤖 Auto-approval Not enabled · Set up

Options

Auto-apply is off → Gitar will not commit updates to this branch.
Display: compact → Counting what did not apply, without listing it.

Comment with these commands to change the behavior for this request:

Auto-apply	Compact
gitar auto-apply:on	gitar display:verbose

_{Was this helpful? React with 👍 / 👎 | Gitar}

[sonarqube-next]

Quality Gate passed for 'cloud-native-gradle-modules'

Issues
0 New issues
0 Fixed issues
0 Accepted issues

Measures
0 Security Hotspots
0 Dependency risks
No data about Coverage
No data about Duplication

See analysis details on SonarQube