From 987824dbb61f0817049ab070f3fcb1c1375ac9f9 Mon Sep 17 00:00:00 2001 From: Panuganti Satya Saketh Date: Mon, 25 May 2026 23:17:21 +0530 Subject: [PATCH 1/6] docs: fix broken and redirecting URLs in README and SECURITY --- README.md | 26 +++++++++++++------------- SECURITY.md | 4 ++-- 2 files changed, 15 insertions(+), 15 deletions(-) diff --git a/README.md b/README.md index f0ab23bb9..d644e80b7 100644 --- a/README.md +++ b/README.md @@ -1,11 +1,11 @@ ## Overview This projects contains [Jackson](../../../jackson) extension component for -reading and writing [XML](http://en.wikipedia.org/wiki/Xml) encoded data. +reading and writing [XML](https://en.wikipedia.org/wiki/XML) encoded data. -Further, the goal is to emulate how [JAXB](http://en.wikipedia.org/wiki/JAXB) data-binding works +Further, the goal is to emulate how [JAXB](https://en.wikipedia.org/wiki/JAXB) data-binding works with "Code-first" approach (no support is added for "Schema-first" approach). -Support for JAXB annotations is provided by [JAXB annotation module](https://github.com/FasterXML/jackson-modules-base/tree/master/jaxb); +Support for JAXB annotations is provided by [JAXB annotation module](https://github.com/FasterXML/jackson-modules-base/tree/3.x/jaxb); this module provides low-level abstractions (`XmlParser`, `ToXmlGenerator`, `XmlFactory`) as well as a small number of higher level overrides needed to make data-binding work. @@ -24,12 +24,12 @@ Specifically: | Type | Status | | ---- | ------ | | Build (CI) | [![Build (github)](https://github.com/FasterXML/jackson-dataformat-xml/actions/workflows/main.yml/badge.svg)](https://github.com/FasterXML/jackson-dataformat-xml/actions/workflows/main.yml) | -| Artifact | [![Maven Central](https://img.shields.io/maven-central/v/tools.jackson.dataformat/jackson-dataformat-xml.svg?label=Maven%20Central)](https://central.sonatype.com/artifact/tools.jackson.dataformat/jackson-dataformat-xml) | -| OSS Sponsorship | [![Tidelift](https://tidelift.com/badges/package/maven/com.fasterxml.jackson.dataformat:jackson-dataformat-xml)](https://tidelift.com/subscription/pkg/maven-com-fasterxml-jackson-dataformat-jackson-dataformat-xml?utm_source=maven-com-fasterxml-jackson-dataformat-jackson-dataformat-xml&utm_medium=referral&utm_campaign=readme) | -| Javadocs | [![Javadoc](https://javadoc.io/badge/tools.jackson.dataformat/jackson-dataformat-xml.svg)](http://www.javadoc.io/doc/tools.jackson.dataformat/jackson-dataformat-xml) | -| Code coverage (2.19) | [![codecov.io](https://codecov.io/github/FasterXML/jackson-dataformat-xml/coverage.svg?branch=2.19)](https://codecov.io/github/FasterXML/jackson-dataformat-xml?branch=2.19) | -| OpenSSF Score | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/FasterXML/jackson-dataformat-xml/badge)](https://securityscorecards.dev/viewer/?uri=github.com/FasterXML/jackson-dataformat-xml) | -| Fuzzing | [![Fuzzing Status](https://oss-fuzz-build-logs.storage.googleapis.com/badges/jackson-dataformat-xml.svg)](https://bugs.chromium.org/p/oss-fuzz/issues/list?sort=-opened&can=1&q=proj:jackson-dataformat-xml) | +| Artifact | [![Maven Central](https://img.shields.io/maven-metadata/v.svg?metadataUrl=https%3A%2F%2Frepo1.maven.org%2Fmaven2%2Ftools%2Fjackson%2Fdataformat%2Fjackson-dataformat-xml%2Fmaven-metadata.xml&label=Maven%20Central)](https://central.sonatype.com/artifact/tools.jackson.dataformat/jackson-dataformat-xml) | +| OSS Sponsorship | [![Tidelift](https://tidelift.com/badges/package/maven/com.fasterxml.jackson.dataformat:jackson-dataformat-xml)](https://www.sonarsource.com/solutions/security/?tidelift=tidelift-redirect&utm_source=maven-com-fasterxml-jackson-dataformat-jackson-dataformat-xml&utm_medium=referral&utm_campaign=readme) | +| Javadocs | [![Javadoc](https://img.shields.io/badge/javadoc-3.1.3-brightgreen.svg)](https://www.javadoc.io/doc/tools.jackson.dataformat/jackson-dataformat-xml) | +| Code coverage (2.19) | [![codecov.io](https://codecov.io/github/FasterXML/jackson-dataformat-xml/coverage.svg?branch=2.19)](https://app.codecov.io/github/FasterXML/jackson-dataformat-xml?branch=2.19) | +| OpenSSF Score | [![OpenSSF Scorecard](https://img.shields.io/ossf-scorecard/github.com/FasterXML/jackson-dataformat-xml?label=openssf+scorecard&style=flat)](https://securityscorecards.dev/viewer/?uri=github.com/FasterXML/jackson-dataformat-xml) | +| Fuzzing | [![Fuzzing Status](https://oss-fuzz-build-logs.storage.googleapis.com/badges/jackson-dataformat-xml.svg)](https://issues.oss-fuzz.com/issues?q=proj:jackson-dataformat-xml) | ## Branches @@ -45,7 +45,7 @@ All released versions have matching git tags (`jackson-dataformat-xml-2.17.1`). ## License -All modules are licensed under [Apache License 2.0](http://www.apache.org/licenses/LICENSE-2.0.txt). +All modules are licensed under [Apache License 2.0](https://www.apache.org/licenses/LICENSE-2.0.txt). ## Maven dependency @@ -148,7 +148,7 @@ XmlMapper mapper = new XmlMapper(xf); // there are other overloads too ``` For configurable properties, you may want to check out -[Configuring Woodstox XML parser](https://medium.com/@cowtowncoder/configuring-woodstox-xml-parser-woodstox-specific-properties-1ce5030a5173) +[Configuring Woodstox XML parser](https://cowtowncoder.medium.com/configuring-woodstox-xml-parser-woodstox-specific-properties-1ce5030a5173) As the well as the Woodstox properties specified above, you can also call [WstxInputFactory#getConfig()](https://javadoc.io/doc/com.fasterxml.woodstox/woodstox-core/latest/com/ctc/wstx/stax/WstxInputFactory.html#getConfig--) and modify the [ReaderConfig](https://javadoc.io/doc/com.fasterxml.woodstox/woodstox-core/latest/com/ctc/wstx/api/ReaderConfig.html). @@ -305,11 +305,11 @@ Jackson components are supported by the Jackson community through mailing lists, Available as part of the Tidelift Subscription. -The maintainers of `jackson-dataformat-xml` and thousands of other packages are working with Tidelift to deliver commercial support and maintenance for the open source dependencies you use to build your applications. Save time, reduce risk, and improve code health, while paying the maintainers of the exact dependencies you use. [Learn more.](https://tidelift.com/subscription/pkg/maven-com-fasterxml-jackson-dataformat-jackson-dataformat-xml?utm_source=maven-com-fasterxml-jackson-dataformat-jackson-dataformat-xml&utm_medium=referral&utm_campaign=enterprise&utm_term=repo) +The maintainers of `jackson-dataformat-xml` and thousands of other packages are working with Tidelift to deliver commercial support and maintenance for the open source dependencies you use to build your applications. Save time, reduce risk, and improve code health, while paying the maintainers of the exact dependencies you use. [Learn more.](https://www.sonarsource.com/solutions/security/?tidelift=tidelift-redirect&utm_source=maven-com-fasterxml-jackson-dataformat-jackson-dataformat-xml&utm_medium=referral&utm_campaign=enterprise&utm_term=repo) ----- # See Also * XML module [wiki page](../../wiki) for more information -* Using XML with [DropWizard](https://github.com/dropwizard/dropwizard)? Check out [this extension](https://github.com/yunspace/dropwizard-xml)! +* Using XML with [DropWizard](https://github.com/dropwizard/dropwizard)? Check out [this extension](https://github.com/mrserverless/dropwizard-xml)! diff --git a/SECURITY.md b/SECURITY.md index 29c0ef270..74f9773bd 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -10,7 +10,7 @@ wiki page ## Reporting a Vulnerability The recommended mechanism for reporting possible security vulnerabilities follows -so-called "Coordinated Disclosure Plan" (see [definition of DCP](https://vuls.cert.org/confluence/display/Wiki/Coordinated+Vulnerability+Disclosure+Guidance) +so-called "Coordinated Disclosure Plan" (see [definition of DCP](https://certcc.github.io/confluence/display/Wiki/Coordinated+Vulnerability+Disclosure+Guidance/) for general idea). The first step is to file a [Tidelift security contact](https://tidelift.com/security): Tidelift will route all reports via their system to maintainers of relevant package(s), and start the process that will evaluate concern and issue possible fixes, send update notices and so on. @@ -27,6 +27,6 @@ This is important to give us time to provide a patch, if necessary, for the prob To verify that any given Jackson artifact has been signed with a valid key, have a look at `KEYS` file of the main Jackson repo: -https://github.com/FasterXML/jackson/blob/master/KEYS +https://github.com/FasterXML/jackson/blob/main/KEYS which lists all known valid keys in use. From 7af11705b1fd440f05ffe4c07f2618aa18adb5d3 Mon Sep 17 00:00:00 2001 From: Tatu Saloranta Date: Mon, 25 May 2026 11:19:25 -0700 Subject: [PATCH 2/6] Reverted unwanted changes --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index 122e91332..313fc9d48 100644 --- a/README.md +++ b/README.md @@ -24,11 +24,11 @@ Specifically: | Type | Status | | ---- | ------ | | Build (CI) | [![Build (github)](https://github.com/FasterXML/jackson-dataformat-xml/actions/workflows/main.yml/badge.svg)](https://github.com/FasterXML/jackson-dataformat-xml/actions/workflows/main.yml) | -| Artifact | [![Maven Central](https://img.shields.io/maven-metadata/v.svg?metadataUrl=https%3A%2F%2Frepo1.maven.org%2Fmaven2%2Ftools%2Fjackson%2Fdataformat%2Fjackson-dataformat-xml%2Fmaven-metadata.xml&label=Maven%20Central)](https://central.sonatype.com/artifact/tools.jackson.dataformat/jackson-dataformat-xml) | +| Artifact | [![Maven Central](https://img.shields.io/maven-central/v/tools.jackson.dataformat/jackson-dataformat-xml.svg?label=Maven%20Central)](https://central.sonatype.com/artifact/tools.jackson.dataformat/jackson-dataformat-xml) | | OSS Sponsorship | [![Tidelift](https://tidelift.com/badges/package/maven/com.fasterxml.jackson.dataformat:jackson-dataformat-xml)](https://www.sonarsource.com/solutions/security/?tidelift=tidelift-redirect&utm_source=maven-com-fasterxml-jackson-dataformat-jackson-dataformat-xml&utm_medium=referral&utm_campaign=readme) | -| Javadocs | [![Javadoc](https://img.shields.io/badge/javadoc-3.1.3-brightgreen.svg)](https://www.javadoc.io/doc/tools.jackson.dataformat/jackson-dataformat-xml) | +| Javadocs | [![Javadoc](https://javadoc.io/badge/tools.jackson.dataformat/jackson-dataformat-xml.svg)](https://www.javadoc.io/doc/tools.jackson.dataformat/jackson-dataformat-xml) | | Code coverage (2.21) | [![codecov.io](https://codecov.io/github/FasterXML/jackson-dataformat-xml/coverage.svg?branch=2.21)](https://app.codecov.io/github/FasterXML/jackson-dataformat-xml?branch=2.21) | -| OpenSSF Score | [![OpenSSF Scorecard](https://img.shields.io/ossf-scorecard/github.com/FasterXML/jackson-dataformat-xml?label=openssf+scorecard&style=flat)](https://securityscorecards.dev/viewer/?uri=github.com/FasterXML/jackson-dataformat-xml) | +| OpenSSF Score | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/FasterXML/jackson-dataformat-xml/badge)](https://securityscorecards.dev/viewer/?uri=github.com/FasterXML/jackson-dataformat-xml) | | Fuzzing | [![Fuzzing Status](https://oss-fuzz-build-logs.storage.googleapis.com/badges/jackson-dataformat-xml.svg)](https://issues.oss-fuzz.com/issues?q=proj:jackson-dataformat-xml) | ## Branches From a227a76e06c3cd1c5b01c88fa03a517f5c102ceb Mon Sep 17 00:00:00 2001 From: Tatu Saloranta Date: Mon, 25 May 2026 11:23:33 -0700 Subject: [PATCH 3/6] Update codecov link --- README.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/README.md b/README.md index 313fc9d48..9fef0da85 100644 --- a/README.md +++ b/README.md @@ -27,7 +27,7 @@ Specifically: | Artifact | [![Maven Central](https://img.shields.io/maven-central/v/tools.jackson.dataformat/jackson-dataformat-xml.svg?label=Maven%20Central)](https://central.sonatype.com/artifact/tools.jackson.dataformat/jackson-dataformat-xml) | | OSS Sponsorship | [![Tidelift](https://tidelift.com/badges/package/maven/com.fasterxml.jackson.dataformat:jackson-dataformat-xml)](https://www.sonarsource.com/solutions/security/?tidelift=tidelift-redirect&utm_source=maven-com-fasterxml-jackson-dataformat-jackson-dataformat-xml&utm_medium=referral&utm_campaign=readme) | | Javadocs | [![Javadoc](https://javadoc.io/badge/tools.jackson.dataformat/jackson-dataformat-xml.svg)](https://www.javadoc.io/doc/tools.jackson.dataformat/jackson-dataformat-xml) | -| Code coverage (2.21) | [![codecov.io](https://codecov.io/github/FasterXML/jackson-dataformat-xml/coverage.svg?branch=2.21)](https://app.codecov.io/github/FasterXML/jackson-dataformat-xml?branch=2.21) | +| Code coverage (2.21) | [![codecov.io](https://codecov.io/gh/FasterXML/jackson-dataformat-xml/branch/2.21/graph/badge.svg)](https://app.codecov.io/gh/FasterXML/jackson-dataformat-xml/tree/2.21) | | OpenSSF Score | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/FasterXML/jackson-dataformat-xml/badge)](https://securityscorecards.dev/viewer/?uri=github.com/FasterXML/jackson-dataformat-xml) | | Fuzzing | [![Fuzzing Status](https://oss-fuzz-build-logs.storage.googleapis.com/badges/jackson-dataformat-xml.svg)](https://issues.oss-fuzz.com/issues?q=proj:jackson-dataformat-xml) | From 7b2086e0604c5167c73823726f22fa68937d5062 Mon Sep 17 00:00:00 2001 From: Panuganti Satya Saketh Date: Tue, 26 May 2026 16:47:42 +0530 Subject: [PATCH 4/6] fix broken and redirecting URLs in README --- README.md | 8 ++++---- 1 file changed, 4 insertions(+), 4 deletions(-) diff --git a/README.md b/README.md index 9fef0da85..d644e80b7 100644 --- a/README.md +++ b/README.md @@ -24,11 +24,11 @@ Specifically: | Type | Status | | ---- | ------ | | Build (CI) | [![Build (github)](https://github.com/FasterXML/jackson-dataformat-xml/actions/workflows/main.yml/badge.svg)](https://github.com/FasterXML/jackson-dataformat-xml/actions/workflows/main.yml) | -| Artifact | [![Maven Central](https://img.shields.io/maven-central/v/tools.jackson.dataformat/jackson-dataformat-xml.svg?label=Maven%20Central)](https://central.sonatype.com/artifact/tools.jackson.dataformat/jackson-dataformat-xml) | +| Artifact | [![Maven Central](https://img.shields.io/maven-metadata/v.svg?metadataUrl=https%3A%2F%2Frepo1.maven.org%2Fmaven2%2Ftools%2Fjackson%2Fdataformat%2Fjackson-dataformat-xml%2Fmaven-metadata.xml&label=Maven%20Central)](https://central.sonatype.com/artifact/tools.jackson.dataformat/jackson-dataformat-xml) | | OSS Sponsorship | [![Tidelift](https://tidelift.com/badges/package/maven/com.fasterxml.jackson.dataformat:jackson-dataformat-xml)](https://www.sonarsource.com/solutions/security/?tidelift=tidelift-redirect&utm_source=maven-com-fasterxml-jackson-dataformat-jackson-dataformat-xml&utm_medium=referral&utm_campaign=readme) | -| Javadocs | [![Javadoc](https://javadoc.io/badge/tools.jackson.dataformat/jackson-dataformat-xml.svg)](https://www.javadoc.io/doc/tools.jackson.dataformat/jackson-dataformat-xml) | -| Code coverage (2.21) | [![codecov.io](https://codecov.io/gh/FasterXML/jackson-dataformat-xml/branch/2.21/graph/badge.svg)](https://app.codecov.io/gh/FasterXML/jackson-dataformat-xml/tree/2.21) | -| OpenSSF Score | [![OpenSSF Scorecard](https://api.securityscorecards.dev/projects/github.com/FasterXML/jackson-dataformat-xml/badge)](https://securityscorecards.dev/viewer/?uri=github.com/FasterXML/jackson-dataformat-xml) | +| Javadocs | [![Javadoc](https://img.shields.io/badge/javadoc-3.1.3-brightgreen.svg)](https://www.javadoc.io/doc/tools.jackson.dataformat/jackson-dataformat-xml) | +| Code coverage (2.19) | [![codecov.io](https://codecov.io/github/FasterXML/jackson-dataformat-xml/coverage.svg?branch=2.19)](https://app.codecov.io/github/FasterXML/jackson-dataformat-xml?branch=2.19) | +| OpenSSF Score | [![OpenSSF Scorecard](https://img.shields.io/ossf-scorecard/github.com/FasterXML/jackson-dataformat-xml?label=openssf+scorecard&style=flat)](https://securityscorecards.dev/viewer/?uri=github.com/FasterXML/jackson-dataformat-xml) | | Fuzzing | [![Fuzzing Status](https://oss-fuzz-build-logs.storage.googleapis.com/badges/jackson-dataformat-xml.svg)](https://issues.oss-fuzz.com/issues?q=proj:jackson-dataformat-xml) | ## Branches From b093a35036d5c968c7c1c4c195779c0ade5eee15 Mon Sep 17 00:00:00 2001 From: Panuganti Satya Saketh Date: Tue, 26 May 2026 16:54:12 +0530 Subject: [PATCH 5/6] fix broken and redirecting URLs in README and SECURITY --- SECURITY.md | 2 +- 1 file changed, 1 insertion(+), 1 deletion(-) diff --git a/SECURITY.md b/SECURITY.md index 74f9773bd..05fd0e150 100644 --- a/SECURITY.md +++ b/SECURITY.md @@ -10,7 +10,7 @@ wiki page ## Reporting a Vulnerability The recommended mechanism for reporting possible security vulnerabilities follows -so-called "Coordinated Disclosure Plan" (see [definition of DCP](https://certcc.github.io/confluence/display/Wiki/Coordinated+Vulnerability+Disclosure+Guidance/) +so-called "Coordinated Disclosure Plan" (see [definition of DCP](https://certcc.github.io/CERT-Guide-to-CVD/tutorials/response_process/) for general idea). The first step is to file a [Tidelift security contact](https://tidelift.com/security): Tidelift will route all reports via their system to maintainers of relevant package(s), and start the process that will evaluate concern and issue possible fixes, send update notices and so on. From dd3158eef29e956dc21e4380abcbef39ddcc888b Mon Sep 17 00:00:00 2001 From: Tatu Saloranta Date: Tue, 26 May 2026 17:15:24 -0700 Subject: [PATCH 6/6] Fix problems with changes --- README.md | 6 +++--- 1 file changed, 3 insertions(+), 3 deletions(-) diff --git a/README.md b/README.md index d644e80b7..3b85745cb 100644 --- a/README.md +++ b/README.md @@ -24,10 +24,10 @@ Specifically: | Type | Status | | ---- | ------ | | Build (CI) | [![Build (github)](https://github.com/FasterXML/jackson-dataformat-xml/actions/workflows/main.yml/badge.svg)](https://github.com/FasterXML/jackson-dataformat-xml/actions/workflows/main.yml) | -| Artifact | [![Maven Central](https://img.shields.io/maven-metadata/v.svg?metadataUrl=https%3A%2F%2Frepo1.maven.org%2Fmaven2%2Ftools%2Fjackson%2Fdataformat%2Fjackson-dataformat-xml%2Fmaven-metadata.xml&label=Maven%20Central)](https://central.sonatype.com/artifact/tools.jackson.dataformat/jackson-dataformat-xml) | +| Artifact | [![Maven Central](https://img.shields.io/maven-central/v/tools.jackson.dataformat/jackson-dataformat-xml.svg?label=Maven%20Central)](https://central.sonatype.com/artifact/tools.jackson.dataformat/jackson-dataformat-xml) | | OSS Sponsorship | [![Tidelift](https://tidelift.com/badges/package/maven/com.fasterxml.jackson.dataformat:jackson-dataformat-xml)](https://www.sonarsource.com/solutions/security/?tidelift=tidelift-redirect&utm_source=maven-com-fasterxml-jackson-dataformat-jackson-dataformat-xml&utm_medium=referral&utm_campaign=readme) | -| Javadocs | [![Javadoc](https://img.shields.io/badge/javadoc-3.1.3-brightgreen.svg)](https://www.javadoc.io/doc/tools.jackson.dataformat/jackson-dataformat-xml) | -| Code coverage (2.19) | [![codecov.io](https://codecov.io/github/FasterXML/jackson-dataformat-xml/coverage.svg?branch=2.19)](https://app.codecov.io/github/FasterXML/jackson-dataformat-xml?branch=2.19) | +| Javadocs | [![Javadoc](https://javadoc.io/badge/tools.jackson.dataformat/jackson-dataformat-xml.svg)](https://www.javadoc.io/doc/tools.jackson.dataformat/jackson-dataformat-xml) | +| Code coverage (3.x) | [![codecov.io](https://codecov.io/github/FasterXML/jackson-dataformat-xml/coverage.svg?branch=3.x)](https://app.codecov.io/github/FasterXML/jackson-dataformat-xml?branch=3.x) | | OpenSSF Score | [![OpenSSF Scorecard](https://img.shields.io/ossf-scorecard/github.com/FasterXML/jackson-dataformat-xml?label=openssf+scorecard&style=flat)](https://securityscorecards.dev/viewer/?uri=github.com/FasterXML/jackson-dataformat-xml) | | Fuzzing | [![Fuzzing Status](https://oss-fuzz-build-logs.storage.googleapis.com/badges/jackson-dataformat-xml.svg)](https://issues.oss-fuzz.com/issues?q=proj:jackson-dataformat-xml) |