Merge pull request #171 from bugsnag/release-v3.6.3

Release v3.6.3

Author: tomlongridge

CHANGELOG.md

@@ -1,5 +1,10 @@
 # Changelog
 
+## 3.6.3 (2021-10-12)
+
+* Bump Jackson from 2.9.1 for critical vulnerability fixes
+  [#170](https://github.com/bugsnag/bugsnag-java/pull/170)
+
 ## 3.6.2 (2020-11-10)
 
 * Fix JVM hang when System.exit or bugsnag.close is not called

bugsnag/build.gradle

@@ -10,7 +10,7 @@ repositories {
 }
 
 dependencies {
-    compile "com.fasterxml.jackson.core:jackson-databind:2.9.1"
+    compile "com.fasterxml.jackson.core:jackson-databind:2.12.5"
     compile "org.slf4j:slf4j-api:1.7.25"
     compileOnly "javax.servlet:javax.servlet-api:${servletApiVersion}"
     compileOnly("ch.qos.logback:logback-classic:${logbackVersion}") {

bugsnag/src/main/java/com/bugsnag/Notifier.java

@@ -5,7 +5,7 @@
 class Notifier {
 
     private static final String NOTIFIER_NAME = "Bugsnag Java";
-    private static final String NOTIFIER_VERSION = "3.6.2";
+    private static final String NOTIFIER_VERSION = "3.6.3";
     private static final String NOTIFIER_URL = "https://github.com/bugsnag/bugsnag-java";
 
     private String notifierName = NOTIFIER_NAME;

gradle.properties

@@ -1,4 +1,4 @@
-version=3.6.2
+version=3.6.3
 group=com.bugsnag
 
 # Default properties