From edda908fc466b884ad65affb682d2510e272884a Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Wed, 4 Mar 2026 11:15:09 +0000
Subject: [PATCH 1/3] chore: bump com.fasterxml.jackson:jackson-bom from 2.20.1
 to 2.21.1

Bumps [com.fasterxml.jackson:jackson-bom](https://github.com/FasterXML/jackson-bom) from 2.20.1 to 2.21.1.
- [Commits](https://github.com/FasterXML/jackson-bom/compare/jackson-bom-2.20.1...jackson-bom-2.21.1)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson:jackson-bom
  dependency-version: 2.21.1
  dependency-type: direct:production
  update-type: version-update:semver-minor
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index f42f95299..a97929c28 100644
--- a/pom.xml
+++ b/pom.xml
@@ -84,7 +84,7 @@
         <maven.deploy.plugin.version>3.1.2</maven.deploy.plugin.version>
         <log4j.version>2.25.3</log4j.version>
         <slf4j.version>2.0.17</slf4j.version>
-        <jackson.version>2.20.1</jackson.version>
+        <jackson.version>2.21.1</jackson.version>
         <aws.sdk.version>2.41.10</aws.sdk.version>
         <aws.xray.recorder.version>2.20.0</aws.xray.recorder.version>
         <payloadoffloading-common.version>2.2.0</payloadoffloading-common.version>

From 623a3be607981484475a4b8a5c7bef3a5cc864a4 Mon Sep 17 00:00:00 2001
From: Philipp Page <pagejep@amazon.com>
Date: Mon, 16 Mar 2026 20:22:39 +0100
Subject: [PATCH 2/3] Pin GraalVM version in CI to 21.0.8 (temporary fix).

---
 .github/workflows/check-build.yml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/.github/workflows/check-build.yml b/.github/workflows/check-build.yml
index f8c79b1aa..f300de86d 100644
--- a/.github/workflows/check-build.yml
+++ b/.github/workflows/check-build.yml
@@ -107,7 +107,7 @@ jobs:
       - name: Setup GraalVM
         uses: graalvm/setup-graalvm@f744c72a42b1995d7b0cbc314bde4bace7ac1fe1 # v1.5.0
         with:
-          java-version: "21"
+          java-version: "21.0.8"
           distribution: "graalvm"
           cache: maven
       - id: graalvm-native-test

From d9b5651b064db40034841f26b6e154faf5ec2a7e Mon Sep 17 00:00:00 2001
From: Philipp Page <pagejep@amazon.com>
Date: Tue, 17 Mar 2026 10:50:01 +0100
Subject: [PATCH 3/3] Add comment why graalvm version was pinned.

---
 .github/workflows/check-build.yml | 1 +
 1 file changed, 1 insertion(+)

diff --git a/.github/workflows/check-build.yml b/.github/workflows/check-build.yml
index f300de86d..d0d45354b 100644
--- a/.github/workflows/check-build.yml
+++ b/.github/workflows/check-build.yml
@@ -107,6 +107,7 @@ jobs:
       - name: Setup GraalVM
         uses: graalvm/setup-graalvm@f744c72a42b1995d7b0cbc314bde4bace7ac1fe1 # v1.5.0
         with:
+          # Pinned to 21.0.8 due to unsafeAllocated enforcement in 21.0.10+. See #2416
           java-version: "21.0.8"
           distribution: "graalvm"
           cache: maven