[SPARK-58861][BUILD] Upgrade Jackson to 2.22.1

[madsager-db]

What changes were proposed in this pull request?

This PR upgrades FasterXML Jackson from 2.22.0 to 2.22.1.

Why are the changes needed?

Jackson 2.22.1 is the latest patch release on the 2.22 line and addresses SPARK-58861.

Does this PR introduce any user-facing change?

No.

How was this patch tested?

CI checks.

Was this patch authored or co-authored using generative AI tooling?

Generated-by: Codex GPT-5

[pan3793]

Given our policy of JVM dependency management - only allow upgrading on major version (security issue may be evaluated case by case), and the versioning policy of Jackson, maybe we should only pick the LTS Jackson to use https://github.com/FasterXML/jackson

cc @dongjoon-hyun@LuciferYang@HyukjinKwon

[uros-b]

Also leaving a note here (just for reference) that this was previously attempted in #57982.

[madsager-db]

Given our policy of JVM dependency management - only allow upgrading on major version (security issue may be evaluated case by case), and the versioning policy of Jackson, maybe we should only pick the LTS Jackson to use https://github.com/FasterXML/jackson

cc @dongjoon-hyun@LuciferYang@HyukjinKwon

I'm targeting the master branch here which I believe means that this is next version (Spark 5.0) only?

Also, the patch version update is to the version we are already using. We are already on 2.22.0 which looks like it is not LTS, and this is just updating to the latest patch version to address security vulnerabilities in that minor version. So, the only changes this is bringing in is this: https://github.com/FasterXML/jackson/wiki/Jackson-Release-2.22.1.

[madsager-db]

Also leaving a note here (just for reference) that this was previously attempted in #57982.

I wasn't aware of that one. It seems to do multiple libraries in one and has not landed yet. Maybe we can land this one to get these security fixes in and then work on the remainder in follow-ups?

[uros-b]

+1, bump looks good to me, I won't merge yet until we all align
adding @HyukjinKwon and @dongjoon-hyun here to discuss more

[HyukjinKwon]

to me im fine

[HyukjinKwon]

Merged to master.

[HyukjinKwon]

Merge Summary:

• merged into master 27579ef

Posted by merge_spark_pr.py