Skip to content

Bump com.jayway.jsonpath:json-path from 2.10.0 to 3.0.0#2268

Open
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/com.jayway.jsonpath-json-path-3.0.0
Open

Bump com.jayway.jsonpath:json-path from 2.10.0 to 3.0.0#2268
dependabot[bot] wants to merge 1 commit intomainfrom
dependabot/gradle/com.jayway.jsonpath-json-path-3.0.0

Conversation

@dependabot
Copy link
Contributor

@dependabot dependabot bot commented on behalf of github Feb 23, 2026

Bumps com.jayway.jsonpath:json-path from 2.10.0 to 3.0.0.

Release notes

Sourced from com.jayway.jsonpath:json-path's releases.

json-path-3.0.0

What's Changed

New Contributors

Full Changelog: json-path/JsonPath@json-path-2.10.0...json-path-3.0.0

Commits

Dependabot compatibility score

Dependabot will resolve any conflicts with this PR as long as you don't alter it yourself. You can also trigger a rebase manually by commenting @dependabot rebase.


Dependabot commands and options

You can trigger Dependabot actions by commenting on this PR:

  • @dependabot rebase will rebase this PR
  • @dependabot recreate will recreate this PR, overwriting any edits that have been made to it
  • @dependabot show <dependency name> ignore conditions will show all of the ignore conditions of the specified dependency
  • @dependabot ignore this major version will close this PR and stop Dependabot creating any more for this major version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this minor version will close this PR and stop Dependabot creating any more for this minor version (unless you reopen the PR or upgrade to it yourself)
  • @dependabot ignore this dependency will close this PR and stop Dependabot creating any more for this dependency (unless you reopen the PR or upgrade to it yourself)

Bumps [com.jayway.jsonpath:json-path](https://github.com/jayway/JsonPath) from 2.10.0 to 3.0.0.
- [Release notes](https://github.com/jayway/JsonPath/releases)
- [Changelog](https://github.com/json-path/JsonPath/blob/master/changelog.md)
- [Commits](json-path/JsonPath@json-path-2.10.0...json-path-3.0.0)

---
updated-dependencies:
- dependency-name: com.jayway.jsonpath:json-path
  dependency-version: 3.0.0
  dependency-type: direct:production
  update-type: version-update:semver-major
...

Signed-off-by: dependabot[bot] <support@github.com>
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Feb 23, 2026
@dependabot dependabot bot requested a review from cmgrote as a code owner February 23, 2026 04:54
@dependabot dependabot bot added dependencies Pull requests that update a dependency file java Pull requests that update Java code labels Feb 23, 2026
@greptile-apps
Copy link

greptile-apps bot commented Feb 23, 2026

Greptile Summary

This PR bumps com.jayway.jsonpath:json-path from 2.10.0 to 3.0.0, a major version upgrade that introduces breaking changes.

Critical Issue:

  • json-path 3.0.0 requires Jackson 3.x as a dependency, but this project currently uses Jackson 2.21.0 (gradle/libs.versions.toml:2)
  • This incompatibility will cause runtime errors when json-path attempts to use Jackson 3 APIs
  • The library is used as a transitive dependency via swagger-parser (samples/packages/openapi-spec-loader) and is force-resolved at the root level for CVE protection

Compatibility Check:

  • Java 17 requirement: ✓ Met (project already targets Java 17)
  • Jackson 3 requirement: ✗ Not met (project uses Jackson 2.21.0)

Recommendation:
Either revert to json-path 2.10.0 or upgrade Jackson to 3.x across the entire project (noting that Jackson 3.x is a major upgrade with its own breaking changes).

Confidence Score: 0/5

  • This PR introduces a critical dependency incompatibility that will cause runtime failures
  • json-path 3.0.0 requires Jackson 3.x but the project uses Jackson 2.21.0, creating a breaking incompatibility that will prevent the application from running correctly
  • gradle/libs.versions.toml requires immediate attention - the version bump conflicts with existing Jackson 2.x dependencies

Important Files Changed

Filename Overview
gradle/libs.versions.toml Major version bump from 2.10.0 to 3.0.0 introduces breaking changes - requires Jackson 3 but project uses Jackson 2.21.0

Last reviewed commit: 51cc283

Copy link

@greptile-apps greptile-apps bot left a comment

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

1 file reviewed, 1 comment

Edit Code Review Agent Settings | Greptile

simplejavamail = "8.12.6"
swagger = "2.1.38"
jsonpath = "2.10.0"
jsonpath = "3.0.0"
Copy link

Choose a reason for hiding this comment

The reason will be displayed to describe this comment to others. Learn more.

json-path 3.0.0 requires Jackson 3.x, but this project uses Jackson 2.21.0 (line 2). This version mismatch will cause runtime errors. Either downgrade json-path to 2.x or upgrade Jackson to 3.x across the entire project.

Suggested change
jsonpath = "3.0.0"
jsonpath = "2.10.0"

Sign up for free to join this conversation on GitHub. Already have an account? Sign in to comment

Labels

dependencies Pull requests that update a dependency file java Pull requests that update Java code

Projects

None yet

Development

Successfully merging this pull request may close these issues.

0 participants