[dependabot]

Bumps the maven group with 1 update in the /wop-sdk-core directory: com.fasterxml.jackson.core:jackson-databind.

Updates com.fasterxml.jackson.core:jackson-databind from 2.18.9 to 2.18.11

Commits

• a254f8c [maven-release-plugin] prepare release jackson-databind-2.18.11
• e6e578b Prep for 2.18.11 release
• 58a675d Add CVE id (CVE-2026-91777) for #6204
• 214d734 Add CVE id (CVE-2026-91776) for #6203
• 37ad9b8 Avoid quadratic forward-reference resolution in Collection/Map deserializers ...
• 2870d1d Prevent unbounded growth of type id cache in TypeDeserializer [GHSA-wv8q-qh...
• f3c95dc Fix #6185: bracket unresolved IPv6 host name in InetSocketAddress serializa...
• 1901d66 Fix issue id back to #6156 (#6155 was the PR) for CVE-2026-83557
• a0bc1a6 Fix CVE id for #6155 (was #6156)
• 4e92b8e Add CVE-2026-77310 on #6058 release note
• Additional commits viewable in compare view

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.

---

Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

• @dependabot rebase will rebase this PR
• @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
• @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
• @dependabot ignore <dependency name> major version will close this group update PR and stop Dependabot creating any more for the specific dependency's major version (unless you unignore this specific dependency's major version or upgrade to it yourself)
• @dependabot ignore <dependency name> minor version will close this group update PR and stop Dependabot creating any more for the specific dependency's minor version (unless you unignore this specific dependency's minor version or upgrade to it yourself)
• @dependabot ignore <dependency name> will close this group update PR and stop Dependabot creating any more for the specific dependency (unless you unignore this specific dependency or upgrade to it yourself)
• @dependabot unignore <dependency name> will remove all of the ignore conditions of the specified dependency
• @dependabot unignore <dependency name> <ignore condition> will remove the ignore condition of the specified dependency and ignore conditions
  You can disable automated security fix PRs for this repo from the Security Alerts page.

[changeset-bot]

⚠️ No Changeset found

Latest commit: 8e6fb8f

Merging this PR will not cause a version bump for any packages. If these changes should not result in a new version, you're good to go. If these changes should result in a version bump, you need to add a changeset.

Click here to learn what changesets are, and how to add one.

Click here if you're a maintainer who wants to add a changeset to this PR

[coderabbitai]

Important

Review skipped

Bot user detected.

To trigger a single review, invoke the @coderabbitai review command.

⚙️ Run configuration

• Configuration used: Organization UI
• Review profile: CHILL
• Plan: Advanced
• Run ID: 9aab94e9-28e5-444d-b1c7-371e709a0b35

You can disable this status message by setting the reviews.review_status to false in the CodeRabbit configuration file.

Use the checkbox below for a quick retry:

• 🔍 Trigger review

• Autofix · Keep fixing CodeRabbit findings and required CI, and resolving merge conflicts

Thanks for using CodeRabbit! It's free for OSS, and your support helps us grow. If you like it, consider giving us a shout-out.

❤️ Share

• X
• Mastodon
• Reddit
• LinkedIn

_{Comment @coderabbitai help to get the list of available commands.}