Skip to content

Jackson Release 3.1.1

Jump to bottom
Tatu Saloranta edited this page Mar 27, 2026 · 20 revisions

Patch version of 3.1, released on March 27, 2026.

Following fixes are included in this patch release.

Changes, core

Streaming

  • #1562: Move module-info.class to jar root level (/module-info.class) from under META-INF/versions/17
  • #1570: Fail parsing from DataInput if StreamReadConstraints.getMaxDocumentLength() set [GHSA-2m67-wjpj-xhg9]

Databind

  • #5710: ObjectWriter transforms polymorphic types into a tree incompletely
  • #5716: @JsonUnwrapped properties moved to end in 3.1.0
  • #5728: @JsonUnwrappeddoesn't work for delegating ValueDeserializer (even one delegating to BeanDeserializerBase)
  • #5785: Wrong path in InvalidFormatException for nested fields and BuilderBasedDeserializer
  • #5786: Regression in TokenBuffer#forceUseOfBigDecimal
  • #5813: JsonMapper not thread-safe when using custom serializers
  • #5814: Enum deserialization does not respect JsonFormat.Feature.ACCEPT_CASE_INSENSITIVE_VALUES override
  • #5819: JsonNodeFeature.STRIP_TRAILING_BIGDECIMAL_ZEROES not working with ObjectMapper.valueToTree()
  • #5840: Jackson 2.21 throws Conflicting property-based creators if both default (0-arg) and multi-arg constructor annotated

Changes, data formats

Avro

  • #387: Avro generator should enforce StreamWriteConstraints.maxNestingDepth

CBOR

  • #669: STRINGREF String reference outside of a namespace

CSV

  • #615: Feature CsvReadFeature.EMPTY_UNQUOTED_STRING_AS_NULL ignored

YAML

  • #6124: Fix YAML anchor replaying parser producing invalid sequence of events when using the merge operator inside an anchor

Changes, data types

Joda

  • #175: JodaModule SPI metadata removed in 3.0.0-rc6

Clone this wiki locally