From ce8e83f582c0a22677b8dcd3f2f4b9b8be9242d8 Mon Sep 17 00:00:00 2001
From: Thierry Boileau <thierry.boileau@qlik.com>
Date: Fri, 9 Oct 2026 11:39:19 +0200
Subject: [PATCH 1/2] fix(QTDI-2768): test drop jackson-mapper-asl

---
 .gitignore                                                 | 1 +
 .../component-runtime-beam-junit/pom.xml                   | 7 -------
 component-server-parent/component-server/pom.xml           | 7 -------
 .../starter/server/service/facet/beam/BeamFacet.java       | 4 +---
 component-studio/component-runtime-di/pom.xml              | 7 -------
 .../src/test/resources/documentTest.xml                    | 7 -------
 6 files changed, 2 insertions(+), 31 deletions(-)

diff --git a/.gitignore b/.gitignore
index b6dbe45b555a1..a9b41ff6d1c1f 100644
--- a/.gitignore
+++ b/.gitignore
@@ -74,3 +74,4 @@ documentation/rebuildpdf.bat
 .claude/CLAUDE.md
 .github/copilot-instructions.md
 .claude/settings.json
+.ai-commons/skills/manage-zephyr-test-cases/scripts/.env
diff --git a/component-runtime-testing/component-runtime-beam-junit/pom.xml b/component-runtime-testing/component-runtime-beam-junit/pom.xml
index 323435f18e5ec..cf972a46d354e 100644
--- a/component-runtime-testing/component-runtime-beam-junit/pom.xml
+++ b/component-runtime-testing/component-runtime-beam-junit/pom.xml
@@ -56,13 +56,6 @@
       <version>${avro-jackson.version}</version>
       <scope>provided</scope>
     </dependency>
-    <dependency>
-      <groupId>org.codehaus.jackson</groupId>
-      <artifactId>jackson-mapper-asl</artifactId>
-      <version>${avro-jackson.version}</version>
-      <scope>test</scope>
-      <!-- skip CVE since this is an utility and it depends more on avro version -->
-    </dependency>
     <dependency>
       <groupId>org.jboss.shrinkwrap.resolver</groupId>
       <artifactId>shrinkwrap-resolver-impl-maven</artifactId>
diff --git a/component-server-parent/component-server/pom.xml b/component-server-parent/component-server/pom.xml
index c24347d675b59..2b158a16df901 100644
--- a/component-server-parent/component-server/pom.xml
+++ b/component-server-parent/component-server/pom.xml
@@ -354,13 +354,6 @@
                   <type>jar</type>
                   <outputDirectory>${sample.beam.location}/deps</outputDirectory>
                 </artifact>
-                <artifact>
-                  <groupId>org.codehaus.jackson</groupId>
-                  <artifactId>jackson-mapper-asl</artifactId>
-                  <version>${avro-jackson.version}</version>
-                  <type>jar</type>
-                  <outputDirectory>${sample.beam.location}/deps</outputDirectory>
-                </artifact>
               </artifactItems>
             </configuration>
           </execution>
diff --git a/component-starter-server/src/main/java/org/talend/sdk/component/starter/server/service/facet/beam/BeamFacet.java b/component-starter-server/src/main/java/org/talend/sdk/component/starter/server/service/facet/beam/BeamFacet.java
index 75b4796e8ac8c..1444088e3acc0 100644
--- a/component-starter-server/src/main/java/org/talend/sdk/component/starter/server/service/facet/beam/BeamFacet.java
+++ b/component-starter-server/src/main/java/org/talend/sdk/component/starter/server/service/facet/beam/BeamFacet.java
@@ -211,9 +211,7 @@ public Stream<Dependency> dependencies(final Collection<String> facets, final Se
                         new Dependency("org.hamcrest", "hamcrest-all", "1.3", "test"),
                         new Dependency("org.apache.beam", "beam-runners-direct-java", versions.getBeam(), "test"),
                         // for avro
-                        new Dependency("org.codehaus.jackson", "jackson-core-asl", versions.getAvroJackson(), "test"),
-                        new Dependency("org.codehaus.jackson", "jackson-mapper-asl", versions.getAvroJackson(),
-                                "test"));
+                        new Dependency("org.codehaus.jackson", "jackson-core-asl", versions.getAvroJackson(), "test"));
     }
 
     @Override
diff --git a/component-studio/component-runtime-di/pom.xml b/component-studio/component-runtime-di/pom.xml
index cae2bf18d8526..2b05b06065e1d 100644
--- a/component-studio/component-runtime-di/pom.xml
+++ b/component-studio/component-runtime-di/pom.xml
@@ -53,13 +53,6 @@
       <scope>provided</scope>
       <optional>true</optional>
     </dependency>
-    <dependency>
-      <groupId>org.codehaus.jackson</groupId>
-      <artifactId>jackson-mapper-asl</artifactId>
-      <version>${avro-jackson.version}</version>
-      <scope>test</scope>
-      <!-- rarely needed + don't deliver it by default since it brings a lot of CVE -->
-    </dependency>
     <dependency>
       <groupId>org.dom4j</groupId>
       <artifactId>dom4j</artifactId>
diff --git a/component-studio/component-runtime-di/src/test/resources/documentTest.xml b/component-studio/component-runtime-di/src/test/resources/documentTest.xml
index 2224c24234338..d891f6a706877 100644
--- a/component-studio/component-runtime-di/src/test/resources/documentTest.xml
+++ b/component-studio/component-runtime-di/src/test/resources/documentTest.xml
@@ -52,13 +52,6 @@
       <scope>provided</scope>
       <optional>true</optional>
     </dependency>
-    <dependency>
-      <groupId>org.codehaus.jackson</groupId>
-      <artifactId>jackson-mapper-asl</artifactId>
-      <version>${avro-jackson.version}</version>
-      <scope>test</scope>
-      <!-- rarely needed + don't deliver it by default since it brings a lot of CVE -->
-    </dependency>
     <dependency>
       <groupId>org.dom4j</groupId>
       <artifactId>dom4j</artifactId>

From 11c43f3a7ca88547fbfb6c69f20ee996ef401415 Mon Sep 17 00:00:00 2001
From: Thierry Boileau <thierry.boileau@qlik.com>
Date: Fri, 9 Oct 2026 13:55:19 +0200
Subject: [PATCH 2/2] fix(QTDI-2768): remove duplicate gmavenplus-plugin
 declaration in starter-server

Co-Authored-By: Claude Sonnet 5.5 <noreply@anthropic.com>
---
 component-starter-server/pom.xml | 10 ----------
 1 file changed, 10 deletions(-)

diff --git a/component-starter-server/pom.xml b/component-starter-server/pom.xml
index 493239f96b90f..4417ef7c8f5fe 100644
--- a/component-starter-server/pom.xml
+++ b/component-starter-server/pom.xml
@@ -462,16 +462,6 @@
                         </exclusions>
                     </dependency>
                 </dependencies>
-            </plugin>
-            <plugin>
-                <groupId>org.codehaus.gmavenplus</groupId>
-                <artifactId>gmavenplus-plugin</artifactId>
-                <configuration>
-                    <allowSystemExits>true</allowSystemExits>
-                    <scripts>
-                        <script>${project.basedir}/src/build/GrabMavenWrapper.groovy</script>
-                    </scripts>
-                </configuration>
                 <executions>
                     <execution>
                         <id>grab-maven-wrapper</id>