From 6dab9105affc85541354c74ae7150c8433083abf Mon Sep 17 00:00:00 2001 From: Andy Wilkinson Date: Tue, 17 Mar 2026 09:11:14 +0000 Subject: [PATCH] Roll back JAX-B upgrades and prohibit 4.0.7 of the RI See gh-49615 See gh-49616 --- spring-boot-project/spring-boot-dependencies/build.gradle | 8 ++++++-- 1 file changed, 6 insertions(+), 2 deletions(-) diff --git a/spring-boot-project/spring-boot-dependencies/build.gradle b/spring-boot-project/spring-boot-dependencies/build.gradle index c809c83c7e4..758c8a8a4d5 100644 --- a/spring-boot-project/spring-boot-dependencies/build.gradle +++ b/spring-boot-project/spring-boot-dependencies/build.gradle @@ -448,7 +448,11 @@ bom { releaseNotes("https://github.com/git-commit-id/git-commit-id-maven-plugin/releases/tag/v{version}") } } - library("Glassfish JAXB", "4.0.7") { + library("Glassfish JAXB", "4.0.6") { + prohibit { + versionRange "[4.0.7]" + because "it contains a regression (https://github.com/spring-projects/spring-boot/issues/49607#issuecomment-4072451614)" + } group("org.glassfish.jaxb") { bom("jaxb-bom") { permit("com.sun.istack:istack-commons-runtime") @@ -923,7 +927,7 @@ bom { .formatted(version.major(), version.minor()), "jakarta.ws.rs") } } - library("Jakarta XML Bind", "4.0.5") { + library("Jakarta XML Bind", "4.0.4") { alignWith { version { of "jakarta.xml.bind:jakarta.xml.bind-api"