From ed83f13a135b0834a2f1fab261dbb9ce61a1b7d9 Mon Sep 17 00:00:00 2001
From: "dependabot[bot]" <49699333+dependabot[bot]@users.noreply.github.com>
Date: Sat, 28 Feb 2026 21:32:02 +0000
Subject: [PATCH 1/2] Bump com.fasterxml.jackson.core:jackson-core from 2.16.2
 to 2.18.6

Bumps [com.fasterxml.jackson.core:jackson-core](https://github.com/FasterXML/jackson-core) from 2.16.2 to 2.18.6.
- [Commits](https://github.com/FasterXML/jackson-core/compare/jackson-core-2.16.2...jackson-core-2.18.6)

---
updated-dependencies:
- dependency-name: com.fasterxml.jackson.core:jackson-core
  dependency-version: 2.18.6
  dependency-type: direct:production
...

Signed-off-by: dependabot[bot] <support@github.com>
---
 pom.xml | 2 +-
 1 file changed, 1 insertion(+), 1 deletion(-)

diff --git a/pom.xml b/pom.xml
index 99ba9725ca63..3573f6ec9512 100644
--- a/pom.xml
+++ b/pom.xml
@@ -94,7 +94,7 @@
       https://github.com/apache/iotdb-bin-resources/tree/main/iotdb-tools-thrift
     -->
         <iotdb-tools-thrift.version>0.14.1.0</iotdb-tools-thrift.version>
-        <jackson.version>2.16.2</jackson.version>
+        <jackson.version>2.18.6</jackson.version>
         <!-- This is the last version to support the javax namespace -->
         <jakarta.servlet-api.version>4.0.4</jakarta.servlet-api.version>
         <!-- This is the last version to support the javax namespace -->

From 4502603859aa1225e8c6f8aa997c4cca2c609ad2 Mon Sep 17 00:00:00 2001
From: CritasWang <critas@outlook.com>
Date: Mon, 2 Mar 2026 14:40:00 +0800
Subject: [PATCH 2/2] update dependencies.json

---
 dependencies.json | 18 ++++++++----------
 1 file changed, 8 insertions(+), 10 deletions(-)

diff --git a/dependencies.json b/dependencies.json
index 1e88db84e77e..4a1cbf804d78 100644
--- a/dependencies.json
+++ b/dependencies.json
@@ -33,17 +33,9 @@
     "com.nimbusds:nimbus-jose-jwt",
     "com.nimbusds:oauth2-oidc-sdk",
     "com.sun.istack:istack-commons-runtime",
-    "org.apache.ratis:ratis-client",
-    "org.apache.ratis:ratis-common",
-    "org.apache.ratis:ratis-grpc",
-    "org.apache.ratis:ratis-metrics-api",
-    "org.apache.ratis:ratis-proto",
-    "org.apache.ratis:ratis-server",
-    "org.apache.ratis:ratis-server-api",
     "com.zaxxer:HikariCP",
     "commons-cli:commons-cli",
     "commons-codec:commons-codec",
-    "commons-codec:commons-codec",
     "commons-logging:commons-logging",
     "io.airlift:airline",
     "io.airlift:units",
@@ -93,6 +85,7 @@
     "jakarta.validation:jakarta.validation-api",
     "jakarta.ws.rs:jakarta.ws.rs-api",
     "jakarta.xml.bind:jakarta.xml.bind-api",
+    "javax.xml.bind:jaxb-api",
     "net.java.dev.jna:jna",
     "net.java.dev.jna:jna-platform",
     "net.minidev:accessors-smart",
@@ -100,11 +93,17 @@
     "org.antlr:antlr4-runtime",
     "org.apache.commons:commons-csv",
     "org.apache.commons:commons-lang3",
-    "org.apache.commons:commons-lang3",
     "org.apache.commons:commons-math3",
     "org.apache.commons:commons-pool2",
     "org.apache.httpcomponents:httpclient",
     "org.apache.httpcomponents:httpcore",
+    "org.apache.ratis:ratis-client",
+    "org.apache.ratis:ratis-common",
+    "org.apache.ratis:ratis-grpc",
+    "org.apache.ratis:ratis-metrics-api",
+    "org.apache.ratis:ratis-proto",
+    "org.apache.ratis:ratis-server",
+    "org.apache.ratis:ratis-server-api",
     "org.apache.ratis:ratis-thirdparty-misc",
     "org.apache.thrift:libthrift",
     "org.apache.tsfile:common",
@@ -113,7 +112,6 @@
     "org.bouncycastle:bcprov-jdk18on",
     "org.bouncycastle:bcutil-jdk18on",
     "org.checkerframework:checker-qual",
-    "org.checkerframework:checker-qual",
     "org.eclipse.collections:eclipse-collections",
     "org.eclipse.collections:eclipse-collections-api",
     "org.eclipse.jetty:jetty-http",