Removes vulnerable package

[JoonLeeNIH]

Overview

Vulnerability fix

Change Details (Specifics)

Fixes jackson dependency vulnerability

Related Ticket(s)

None

[Copilot]

Pull request overview

Updates Maven dependency management to address a Jackson-related vulnerability by centrally managing Jackson versions via a BOM import.

Changes:

• Import com.fasterxml.jackson:jackson-bom in dependencyManagement to align Jackson artifact versions.
• Remove the explicit version from jackson-dataformat-yaml so it is managed by the BOM.

Comments suppressed due to low confidence (1)

pom.xml:46

• The indentation/formatting in this dependencyManagement block is inconsistent: netty-codec’s <groupId>/<artifactId>/<version> lines aren’t aligned with the surrounding XML. Please reformat this section for readability and to avoid future noisy diffs.

            </dependency>
            <dependency>
            <groupId>io.netty</groupId>
            <artifactId>netty-codec</artifactId>
            <version>4.1.125.Final</version>

---

💡 Add Copilot custom instructions for smarter, more guided reviews. Learn how to get started.

[huuaho]

LGTM